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(54) ELECTRONIC TICKET SYSTEM 

(57)Abstract: 

PROBLEM TO BE SOLVED: To make illegal use by forgery or duplication extremely 
difficult, to certify the content of a ticket to a third person, and to maintain the 
anonymity of a user at the time of using the ticket in an electronic ticket using 
environment. 

SOLUTION: A ticket preparing part 4 of a ticket preparing and issuing device 1 
prepares the specification of a ticket corresponding to a prescribed service or 
article based on a ticket preparation request. A ticket issuing part 5 issues a 
corresponding ticket by inputting a ticket identifier, certifier identifier, ticket 
specification identifier, and ticket additional information based on a ticket issue 
request A ticket certifying device 2 holds the ticket issued by the ticket issuing 
part 5, and certifies the holding of the ticket by communicating with a ticket 
verifying device 3. The ticket verifying device 3 holds the ticket identifier and a 
ticket verification procedure prepared by the ticket preparing means 4, and 
operates the verification of the ticket by communicating with the ticket certifying 
device 2. 
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1 1 +>rv vwfsmm., *5-T y hMmiW.fr 

btt&WW-try h^fAtJjoT, ±E^y 

it>±E^y bW®ffints£Zfi± 
y-y h*1T^»t*^*0» .tE^y hSBE3£Btt. 
b< >Pte< iWy h*Jffl#H^r««i:^^y H^b 

[M#JS2] ^y hSStrgefi, tfcSEgBs !E8§SIB 
3§fT£!Bf±, 'M<it^s/ Ki;Htt«i^s/ h» 
BB*r«*««f#»i:» £ *><3^y h 

X, ±E^yHMx«ttt, f h#SMS:M 

-et^^i/ h¥fmmnft&.¥&&ffiz.itzb*mmb 

^TAffcoX, ±E?-*-y H*fT»BH\ fiEBBSBft 
8iJ1»«SraEMSi1IH*r«#i:B8il<J«-C(!ia*-t-*IE«WSI 

BiSssura «fia##st«ifcr t z&mb-i-z>w.^>r 

h-^fAtfeot, ^y-;y N »««««:•'>/£< ttf 
^y^MMi^yh »«* W A> b * 5 r. i: 

[f»#3S8] t»*3S2~7(D^-r^^C|E^CD^;T-5 : - 



(ffll&gl 9 ] St 8 IE«»«T-^^ y h-^TAf 

[§t*jsio] m*m9mwxDW,*?'iry hy^f a 

«r*"*-«*S:«l*r«^-{r y h# h fed 

jcft*«f«ejiSrtT* 5 r. b &®mbi-zn* 

»B*»&±etftSE3gBfcte**-<5 r. t 5r#fit5^ 

[at** 1 4 ] nxm gstiiio e«©s^f y 

h^fA-efcot, ±ESEPJ^B»rtgB^li^#S 
»t-C^«B*»fe»#ift^lB<c»-efiM*U, ±E^y h 

A"CfeoT> ±E4£lB£Bfi'>& < £ t> 1 « . -hffira 
£Bfcflf*S:e*U -hEfE9?£ifitt, ±EtjHERBa» 
bfil^Sifiafc^ot, ^y hirHit#ttb 
Hfc, ^y h©#S6tt*^i-rta«t*SraE!EUT» W 

mmt^frtao z. b^mmt-r^^^r y h-^r 

[|»*JS16] SI*fi9 4fci4iOEi©«W5- 
l-^fAffeot, ±IEHEW»B©rt«*t«B««r#H: 

tem-tZ>ZbZmWb-rZ>1g*?-try hV*xJ». 

7] it^Jgl 6<0tWy hWrAf 



lCtffffi££j§U ±IBIEBJ^«(±, if&fcSE^B^fefc 

1 9 j at^jg 2~i7 <D\,^~rtiMz.um<z>m. 

Wyh-^fAffcot, ±faEE913£*aatS£t*fiE 
[tt*«20] 8»*3fi2~l 9WV^i"ixA»^BE«©« 

[ft*3S2 11 tt*3g2~2 OCO^Tix^^lEttcom 

[»#52 2] f»#JS2~2 1 W^-ftud^CfE^om 
BEiS1tOB«-««S:fia*i-5«BEiS«H*«#i!ii«p#a 

[ff*JS2 3] lt*3S2~2 2<DV>-ftv*»{CfE«©m 

zzt&mmk-r&VT-f-tr? h-^fA 0 

MtiMRj&s (n, E) t?*>*> x A. (n) ^nfflTt'fil: 
*S**i*5*(iCHa»-C*)9, EDs l mo d A. 

KH^rfll«*s««5<o— ^isittBa* d u (l, n) -efe 

f^y htf s t : =D-d 0 (L, n) X5-x.t>tlX 
±CffiE9HS1»tt:» f§SEtW*RC \z.ft UT, fEPJ 

^^JttMfcfitdu (L, n) Srmfcti-SS^iWferi 
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t?cD«CtC dlJ < L . "0 mod ni LTBE9H*«ar8W 
i-SifcfrWRi-^-am^^ry hV7fA 0 
[|»*JS2 5] f|*352 3E*©m^-{ry hf*^ 

<D4kmffiffl>S (n, E) T'fel?, ED= 1 mo d X 

(n) T*foi5, f<r? hWft-JPlf L T'fc <9 , 
BBWt**^^CD{eduT*fc«9, f (d U( L, n) Sr 
-jjfa®.mmb LT, h# t : = D _ f ( du , 

l, n) x*5-7LbHx^z>b%. ±.mmmmw.\±. mm. 

fltfCtSLt, EESMfMBRSrCOftn-C© tfc:J:a* 
ffst, COftn-CO- *(6H4B8*ffif (du. L, n) 
SrfiiSci:-rSS*i:©fen-C©WCtCf(dU ) L > n) mo 

d nbisxmmmmzft&i-zzb&qmb-rz'm* 

f-*ry hi/^7"A 0 

2 6 ] R4t9 2 3 Eft©*^-*" S* h 
At'fcot, ^y hW^B&tfMitfSx p^iitgc 

^■|R»GOflrSfCp©5c-e*>9, *-<jry K©4itMflMS# 
(p. G, g, y) X'h<9, y = g*Xh<9. f^yh 

ftttWIfcdu (L, y) fib!), f^^MU :=x- 
d(j (L, y) T*4x.?,htP5tJ 1 ±IBfE91S!S 

(4, f§!Etf$BClc*|-L-C. atwmmR&ccD t&mmb 

i-zmmb, c<D-jjfo&mmmdu a, y ) 

Afiot, h©f&3fctf#8a s x-efc?K 7-fryh 

©4*m**# (p, g, g , y ) y = g*xh 

<0. *f-Ty KOftJn««*SL-C&9, SEBJ^S@^tW« 
^8HfiOfli[du-e*»0, f (du, L, y) 5r-^(S]t4^ 
tirtt, f^y h*5t :=x-f (du, L, y) t? 

*l6li4B8«c«f (du. L. y) SrJMfct-t-aiBfci:© 
Wc t c f(dU.L.y) [sXmWffim*f\:&1rZZb*!ft 
mb-tzm+'^ry h-^fA. 
[»*«2 8] t»*«2 ZWMLVttfry his^r 

A. 

Affect, ±fBttiias«f±, mmmmc bsEw\nmR 

b^try b^mmm (n. E) b<Di$r&, UPJtf^R^ 
&nT-E*bfct©$rCi:Jt|!?b, fe5 tfj/ VmMtfh 
ot> R E mod n = C | | M (C bMb<T>t*y 

m bt£^x\,->ivt2m.mtiiniijEv\,*bW£i^ stmm 
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AX-fcoT, ±«&»BEfS«tt, B8EtittKC£8E93tiBRR 
h^HMMR (n, E) I *^#>$-tl 

x e«» Lfc t> (D t c t u-fti&mnmmteiE 

y hv-xfA, 

Affcot, ^y h«f«^Dt'fe»), =?v-y h 

^srEut lt> -tmmwmmte. i->ry v& t : =eu 

(D I |L) X5-7thft,X\,^k h t 5rdu 

mL*VrW-f%Zk*'®mk'i-Z>m z F^v--y 
A, 

[|f*3S3 3 ] Sft*]g 3 1 fS«(D*^^>r y h 

(ommmiLxhy. mwmwmmmm-hzm^ 

CSrEutU h (L) Sr-*i^H4B8»i: tt. -hlHEE 
Wgfifi. h*St : =Eu (D | | h (L) ) X 

M?>ntV^tf, ^^s/ h t ^du(Cj;oT«-§-L 
h®*W«D«rfWU hfl-JjQflf* L © 

-#fiH4H8fith (L) ZUn-TZZ. kK£<9 > L©^ 

[SIM3 4] flt*«3 lEtOl^y hv-*^ 

<ommm*Lxtb9. mmmmmm^m-h^^ 
(Dm^mduxh*), mwmmmmmiztti&irzm^ 

flS&EuirU h (L) Sr-*l6lttH»i: LT, 
b&t : = (Eu (D) . h (du I I D | | L) ) 
*.&*b-CV*«£#, ±1ESE9l8«f±?-4r y h t ©fg 1 
»ftd D tJ:ot«tU-Cf-*y haf*flMRDSrtH|C 
U h t©JB2|*»i-*rfiJttM*ffih (du | 

|D| |L) k*itm-f-ZZklz£iX<?-!r-y httMffi 

3 5 ] ff Jfcj§ 28-3001/ ft/NClEft© 



[mi] 

C mod n 

i: L,X&nirZ)Z.k&&&k-rzm.*'7-y-y hV^r 

A-CfooT. .kfBBEHSgBH:* m*W*fiH$^««r# 
[f*#JS 3 8 ] ff*3a 3 7 iEtt©®^-^ s/ h 

mtimn&ft^mc&nztitcmjjtiin&Mk u 

[It*3l3 9] H#JS2 3|E«CDmT-^^y hV7f 
AT-feoT, ifBEEBJ^BH, m 2 OBSIMi^ifS 

JPfllf* t J: t) % 2 OBEW«*3PjE Ll/ k' o *»Sr*J3e 

Wm&Rm-i-ZZ k*<ft&k-t-Z&*?tr y h-^f 

AT-feox, h muffins \*'pt£< kh±Mm& 

X (v) liBHcSiLX, ifHmESJ^fitt. »2©W 
[^C2] 

X — P' mod o 

&%mk-tzn*<?-v-y h-^rA. 

[»*«4 1 ] tf#JS3 9UWt(Om^y-y h^T 
Sr^^-, ±IEtiEPJ^Btt, ^2©|g|EiW«g s <!:^2© 
[£fc3] 

j0 = 77 8 mod p 
[|»*Ja4 2] ff*JS3 9E*OtW? hWf 

A-efoox. ±ieii0jsb(4. AMnm.&n^wczm 
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ttX (v) ttSv^SUtUT. ±ISEE 
WSMSfi, &2©BIiEW«xi»2©IEWt**/>!9S*>$ 
tfy hJiJyut^MLT, 
[£Sc4] 

X I \ U = p e mod v 

Affcot, f-*ry bmnffinui'JrteK b h v | | £ 
iiatEB^Stt, £2<Z)BliEflf*Rx&£ 
2©8E9ittf*pas I £^«>-fj-;t;fcPg#£ LT, fe5//< 
I tMLt> 
[&5] 

X — P mod v 

Sr?gfc1-£ *fcJ&2©ffiWW*^iELv^W£U „ £ 
Sf2©IEMtff*k:ffi«>ii*ixfcA*««i: LTA^fS 

[»*«4S1 «*^2 SIB*®*??-*-? hV^? 

fit «t tS^Pt, SE5)Hf$8&jEL< £jfc-f 5JH?a»*r 
*l£1-3w££#m£1-3tt^-^y F-^rA, 
[11*3148] ft*:3S2 zmmoy^fr y h-^r 

tiratts-^-c, m*«#*tnju, m*#««»¥ 
m^m-r^^b^wmb-r^m^-yy h-^fA. 

[«#Jg4 9] lt*«2 3fE«<Dm^^S/ 
At-fcot, ±IS^tE^Stt> fl* 2 ©BSEflMR 
SH-SffcflMRi: J: 9 31 2 ©BEMWWSr^-fS 

[»M5 0] H*^4 9fE«<E>tt^^y hy^f 
Affcot, 4$4iS:£-MB«tif4R& 5 £ LT, *t£-T3 
^MW«Sr (v, £ ) iLt, t 8 = 1 mod A. 

(v) jJSWfcSitSit* ±1E1*8E»«»±. Jg2©BU 



AIT # % i 9 H 2 QEEHtiftR P * 
[£fc6] 

p '. = X s mod v 

[»*«5 1 ] «*JI4 9B«©m^*-y h->^f 

4*HHfMR«: (p, g, q, t,) t LT> 
[*7l 

T} — g s mod p 

awc^s^ ±ia«iBESs«»±» m2(Dmmmx 

p : — X 1 mod p 

£ LX£.&.1rZZb$:mmb-tZ^*nry h*s*y- 

[tt*3S5 2] tf*]S4 9, 5 0*fcf±5 lffl**©* 

£ US 2 OBtEflf 38 £ J: 9 fg 2 WfjEBJff «Srfm-T5 i £ 
S:#m£i-5«iF-^yy hWfA. 

[t»*3S5 3] g«*« 5 2|S«om^ -Jry 
Atfcot, #*&£i-«Hfcttf#«: 5 £ Lt> 3 
4atM*«3: (v, £ ) £ LT> i8= lmod A. 

(v) aWc£;ix3£#. ±IE^fE^Stt. A^1*«{S 
tt^ateiSttSiKfcA***/. £ ^2 0BSEtf#x =fc 
<0%2 OEEHffftt p Sr 

[19] 

s u 

p : = x mod i> 

[»#55 4] W*3S4 9, 5 0£fct±5 1|B*0« 
h^TA-efcot, ±B»«E3StWU A^tfr 

Srffl^T* 2 OBE«*Sr!5«fi-5 r £ Sr4$*£-*--5 W 

Atiot, ±IS^IEiSef4, A^i*«{SM^a£# 
Sg2WBmEtfM$£;c£-t-3£, H2cDBiiEtW#^x I I 

uiczm-tzzbzmmb-rz^rf-try f-^ta. 

^y hSr^tT-T^mT-^^y H8fT3fi«te*s^T, 

#«^#S£, 
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axif-^r-y bmm&mmmizmfe<ofcnzmn\.T± 

'>&< th^tr-y bwmmk±m^try bmrn^mm 
mnti>>t>2i&£iMt? t i?f /Ht h * 5 y h * 

th±^^r-y bmm^mmmnt±m^-^'y b 

mm.. 

WEEJB <£>tit$B «r£j*-f 5 i: , 

AMR £ A» $ Hfcf 8 ' Mf mfr ht£%fryb 

±si^-y--y bm.m$im<nmmtfmk\zm<j\,^x±i& 
>r y b®&mmkmmmmmftm&ki>>t>£.&,£tiit7 ! 

[*9§©i¥»*fl&W] 
[00 0 1] 

[0 0 0 21 

[t£*cDft«] SU£#, mff»s A*#. ^Hft 



@fgc2K jaw*, ssi, T/jj^-r k*-k, #>f 

^h*-K, £*IE, iitrlE, WF»TEEfci?tt:, *nSr« 
*k)bX3-*'y bkW&* -mzrtry M±» 

[0 0 0 3] rc»J:5^yhSrr;fl±i5f^-7h 
fcufcS. i£c¥T?tt, 38f?#a*. *Jffl#fc-£;tfc;tt*iJ&«l$ 
Sflt > iEUr Kt?fc-5r£Sr«ltE-C-#5, k 

= t°-&ffimzft*iZ>(OX\ n^fry HSrSiai-5»c 

t-&5o z.o>it#>. m$uc£ttiEmm&mit-rzzk 

[0004] tw^m. ^-'rybnmm^ 
fcaEa**Jffl#*»«Bi-ajBlof63l5ftfl5. mr&Skfb 
fD&izf-t-y b*Wf-rZ>W&* t *k.t£^%i2 

[0005] £&*a«lco^THH&t&?)!t-5, 
[000 6] » 1 (D^5l5SWtt, ^-^r y hO^IJffll^fcjE 

bkL-xwuL-x. mm%&mmn.-rz>o 

<r>mmm^^r-y b&famX'Zfo^ofc-tZlzifyiz 

hit. ®,m£fttci><Dk¥imi$tiZ> 0 
[0 0 0 7] TJE^m^Vtcf-fry b<Dmm*V5ik-rz 

fcfe. *]«#»:, nrirb*mm-+&mz x f-^-ybk 
flcw«f«, '<*y-Yt£k*n$m<»ffim. KEtmmx 

[0008] ^2 Wn%$kft-o J %\z.<3->r 
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*y hSr*9-C#*^J:5^i-5««i:, »fT«««iE 

SftKrt»tHt#4k*KB»LT, ^©=g§© 

©fc#>, JKW-CSfc^fflfllJfrifcSri 0-0*5. 
[0009] :©«Mfro- W 5 . #1^8-147 

5 0 0-§-^-CBB^$tu-CV>5. ro^jSfe-Ctt, 

y Hte^gEfilc. <^y h*fT#*^-*- 
y hrortStlfi^eix.fcf^j' hS:S§li&J65;: 
iT\ S^^y hSrHmUTV*5<, LTV* 
5<DT-m5t(iffiH-T?$)5o ^y MfettKfi^fe^y 

y NSr«^^H5r tSrKihLT^So i ©Effete <fc;ft, 

5««**pf>J5e<Tt>, ^y H©**©jESttSr«» 
•f 5 -CttBEsJS ^TtB-Cfe 5 o 

[ooio] sb 3 ©tt*ft05B\ &mm<omm*'£M-z 

* 5 <fc 5 KM* 2 ©1£*a«f SrlfcE Lfc#8r(?*>S. 
[0011] C©^j£T-tt, <?-5ry h&SHfeflHRi: LT 

BEMUtt, ^y h-C*>5S*«*S:*JfflUfc»*Sr^- 
•Y LT«Lt> #^tv/dB (u^^yx) Sr 

mj$^xuxtf>'x.ji>ifog.&)n,izz.b*mm-rzz.b 

5 0 

[0 0 12] *^yyVlfe^©Ty^xS!]ffl>©fc«> 
©RJEfcBfiMSRjeSih/O^as, S3 0»SftPl 
«0«MB*»tt-r5*fe*s. ^¥6-5 2 5 1 8§^ 
«-CM*3*t-Ct*5. rc^ftt'li, Jit 3 ©&*&*fT(e: 

») mm&h^<temmmv)m*t>mm%-$:&v 



[0 0 13] 

T^H CfcB#tef±JilH#te <t 5 IMW&K-Cfc 5„ 
CKBfcft, JSf^yhijS*fcLTl»t ttWSrlEW-t-5 

[0 0 14] IfciJot, tW5-M;tt, S©3jS 
•^•^o^fc*tfilrt^$rBH#telE?^-t-5^tg-C*fe5o 

[0015] mi ©^Mffitii^ *uffl-r5fi]ffl#^s 

[0016] #Uffi#WJ&W«Cjfi]ffl#©#5cSr*iJffi-t-5 

5 0 jpjffl#fl*jeflMnc«*JWc t*(D&fr&3®m*%\mir 

*j£teLTt>EiSttiSS^4x5(0-e, 
>rvV (35 4 o«ft£) /JSH^-e # fev \ 
[0017] $ fete, iifi 0i8!£rfijffl Lfc3HW«jfc8*# 
T-#^Sr^(cfE^-f-5*jfef±lim$ttTI/^j:V^T% 

[0 0 18] fgi©t£*i£fi?sc*s^T, *Hffi##^W* 
i^/^y- KSr*Jffli-5*^T?»±, E*tt(OP D ^HttS« 

5» 4^ ?iJffl#i^iSfeKte^^l7-KSraiiftS-er5w t 

[0 0 19] ^2(D^*fe^T*li, SpJffl^SfttfLTt^ 
5^y hSrffi^-C#^:<-t-5wteAP^r, «fT#*s^- 

L-0*5. 2owpg®* s *C5. mioPp^M 

^y h«JjEa«t*f5=#KiiEM-*-5^i:^B3tte45i 
tT-$)5„ ^ y H=^5*««©jB 3 

[0 0 2 0] #P^P8- 1 4 7 5 0 o-9^«»c:H*$*b 



(8) 



1-031204 



[00 2 1] Sg 3 cDt£3f5&fl?(i, ISfECDfcfetClflJffl £ix 

[0 0 2 2] 2 5 1 8 -§-^#trBg^§tuT 

[0023] ztiizxicM^lzi. 51-, t£*©ftf|ff±V> 
Bdii-SfiMISrim-t'Sfcftfc:, »2*s.fcl*|&3©*fB 

[00 24] 

[»&LJ:5i:-r3!$JS] .LfSwRgja 
Sr»fti-5fcftfc, IlOi^iLX, W&*ttat&£ 

[0 0 2 5] 

y Kv^-r-Mi, «TO^-^ b&ffmmtT-lry ME 

wil«¥StSr^o 0 ^ y M*BE»B»4» 4ttE#JHJt 
[00 2 6] h^tTSfifi, f^yh 

3^y Ftc^JtSi-SBEBJ^Il^^tf-r-SrticioT 



^ry hwfijffl 

tftafrinz. tkmtiWK. mwmwikmm^wt&frLx 

m LTV**:: t Sr1^SEi-So KO»Httt. &SE 

[00 2 7] 

[»9§ ©§$*©*«] ETF, *3BM©»j»S:or©)IBfc 

1. 3afi^fr©«B (El 12, 0 2 8, [2129) 

2. JglWUlSM 
2. 1. igfjE^Sc 

2. 2. 1BS*/«C*HS7 p o Fn/v (013, 019, 02 
0) 

mm&m^^-y b 

2. 3. ^lC»MiS7"n h^/V (014, 019, 02 
1) 

t&AW&f-trv h (4*tE£tBK:i*ff|-) 

2. 4. m2<Dttmrfv (015, 019, 02 

2) 

2. 5. S?3 0xtig:/n ha/V (016, 019, 02 
3) 

mmmm^y b m^mx) 

2. 6. m4<DZtmi-y*a h^/l- (016, 019, 02 
4) 

(S3te*^IIg) 

2. 7. ^5cD*H£:^n hn/V (017, 019, 02 
5) 

$ *y~fj3 — Y^tf-fr y b 
2. 8. ^6<0*Hg^ci hn/v (018, 019, 02 
6) 

7V'<4 K# — Ymf-^-yb (m^X) 

2. 9. ^©MfS^n Hn/V/ (018, 019, 02 

7) 

^!)^ K#- KSf ^ y h (W3fe**Tt&) 

2. 10. l8ro^K7'oh3;u (gi6, il9, i 

2 4) 

mwmm^-^r y h 

2. 1 1 . SB9c7?*j-fg:/t3 ha/u (01 8) 
■fV^-f K*- KM^^ry h 

2. 1 2. ill OWMSlT'ci ha/w (Eli 8, 0 1 9, 
0 2 7) 

K#- KS^-Jry h 
2. 13. fll(OWPh^Hi:<l;'iU 
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&&7a Ka/wHg 

2. 14. ^12©MS/nh3yV (il9, i3 1) 

2. 1 5. $&1 3(D)$myv Fa/W (EI 3 0) 

3. 3f§ 2 CD JUfc#J 
3. 1. MSE^ife 

3 . 2 . m i 4 wmist'ci k (m i 3 , Ei i 9 , 0 

2 0) 

£ffl#S!^y h 

3 . 3. 115 ©JtSyo h =/V (11132, HI 1 9 , HI 

3 3) 

5t»#l!H^y h 

4. m3(Dmmm (as~i9) 

5. Jg4(D|li&0iJ (04, El 5) 

to 02 si [i. mmm±w<omm 

(01, 02, 03, 012, 02 8, 02 9) 01 »± 
#3£BJcDfl;^-^y hv/^^A©«^ElT'fc?,o 01 K 
iol/^T, CKDIgl^CDflirP^y hi'^.Mi, f^ryh 
fft* • 38fr£§g 1 , =^y-y MEHSS 2 , *S Jctf^Jr y 

S5Sr*LTV^. f<ry hf^J5g#S4fi, 5^y hf£ 

(^y h**ttISo-C»ffiS:*Si-5*^ 
-tcDftSA) <0?^y hffc8tfaHfcS<5^T, 3rJ£©-fr 

Of^y hSSmtetft'S^T, ^y MWPJ^fiEW 
{SflW'J^^y htttilSfeSiJ^i^y MMnflMKrA 

[0 0 2 9] ^y"y KEWig»2fi, ^yhlgfT^Sk 
5©S5fTUt7-{ry hSr»«fU ^yH*BEK«3i 
»«&fr*V^-4ry HOfil*«:lEWi-«. httEE 

h&5E#Mfi£««U 9^y hSEW^ll2 t 

14. ^ -y hffr& • ^fTg» 1 , y htEHISfll 2 *3 

±^5- M*BESSB3Sr-t*tJe*t^y hffr£ • IStf 

[0030] 0 2*iJ:tf0 3B:?-y-y hfft*'36tT3£lt 
l<om&$:±#-}i LT^UTV^S. 012fi^ 
y HEWSEK2*J«ttJ«^y h«ES(«3 ©«^Sr^fl£ 
irLT^LTV^, fc*5, IH 2iiJ;tf0 3 (4{5(JID-<D 

£BfIiC/8^£#J£Ift^1-3cD»C#LT, 03f±RSA 

[00 3 1] 0 2tC:j3V>T, 5^y hffr& • WfimU 1 
fi, 4, ^yh*fT» 



«) 5, ^y hJSSI^-^^-^ejB^WBEWSHW 

bid, ^y httJUf*— ^8^ltbHT^S. 
^y-y KfNo • 3&trg« 1 ©»IB mm fcoivffijS 

3 o9tttM« 4 <Dnnm%:&m u-casfi-f s. 

[0 0 3 2] 012(CtJ^T, ^7^111311, 
#>£E¥JlEHmi5 1 1 lfciViim^l 1 2Sr#UT*J 
9, *fc, ^-Jr y ME9§SS«2Hu ^y"y h&tfgB 1 2 
1, ^y"y MftXffil 2 2, @# tW$8«»g|5 1 23, 
SMKMSfiaSSB 1 2 4, 5EK3ME0lfTm 2 Stsitfilff 
gPl 2 6$r^TLTV^5 0 

[00 3 3] 029 (±^-y- y hEEM3SB 2 ©lEW^JHIS 
tTgPl 2 5<Di¥*ffl^fi|figSr^LT*5«), £fc, 028fi 
9^ry httfiE$S«3©ttE*«SStTttl 1 lW#*B)fe« 
^;Sr^LTV^2 ) c 02 84oiO t 02 9lC^i-J; * 
HISCTT-fi, !EPJig*2cO!iE0J^JllM*fTg|51 2 511, 3fe 
imM 2 9 1, SfSSC 2 9 2, ^1 <OffiW& 2 9 3, ^2 
W^g|5 2 9 4, ES14^lia5 2 9 5, BEEtt«^«iS 
2 9 6, BfEtt m&kftn 2 9 7, ^2<DBlEiS*^gP 

298, mm&ftn 299, m*««i»»» 2910, 

X*7«*«*ttU2 9 1 1 , mU^mS 2 9 1 2i^b«$ 
[00 34] ^SEiSg 3 ©«BE#J(H*tT« 1 1 1 tt, iH 

mn 281, smgc 282, mi <Dmw.$t> 2 8 3, m 2 

<fSIS^2 8 4, !Em^mU2 8 5, BIElt»^gB 
2 8 6, S!EW«^«SB2 8 7, ^y~y hflWJ^dfe^lB 
2 8 8, ff««^r«|S 2 8 9, W^tf «^S5 2 8 1 0, 
A***«»«B2 8 11, iiit)®>2 8 12, A^SC 2 8 

i 3, mmmmm m&nn 2 8 1 4t^f>«^$^5. 

[00 3 5] »TO«*fc*iV^t:#¥JIS5ltT«BSr#^*- 

[00 3 6] [ 2 . * 1 ©HJEW] 1 © 

[2. 1. BSE#lfe] ^yHlif^-^hOtffii 
aU$n?.o ^4ry h RSA^M*llff-ii-J6fc: 

&mmt l, 

[0 0 3 7] 
[»1 0] 

n = pq, X (n) = I c m (p — 1, q — 1 ) , 

1 c mf±»/jv4H»»Sr*-r) 

[0 0 3 8] 

[til] ED= 1 mod A. (n) 

i6S«fcStb5i:#, (n, E) fc^ffltil^i L, D^M 

^£;-r5S^S;tf$B<!:i-s^a•^co^^T, Hftsf^? 
[0039] ^ y h ti^^- y h«ttit«D t mwmm 
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■C*>9» HEWS 2 # (c, n. t. L) \zM L-CBEW* 
HWflMRduSrffll'^TT (C, n, t, L) =C D mo 

[0 0 4 0lMx.fi, du2rfcSB&#^<om#Sit U 
[0 0 4 1] 

mi 2i 

t : = (E(j (D) % H (du I I D | | L) ) 

©jUST?**. ) 

nrvY* (1) iUT^a-TSi:, f^ryMrffl^fc 

m&<D!&mtimDKj:zm%-i£c 0 mod nr±, a 
a (c n, t, D izMLx$itmmm:<ommnndu 

CioTEu (D) fctt* UTEWSSIlf-CDSrlEltK 

D©ffiS:fflV^TlEW3fi«rt-CCD mod n fcfrJW" 
5 J: 5 fcitUfAw*. 

[0 0 4 2] Sfc, du&— #l*H4Hgci L-T, 
[0 0 4 3] 

[mi 2] t : =D-du (L, n) 

[0044] f-4ryh Sr±*4: t , A* 

(C, n, t, L) l^ttDtia^fftC" mo 
d nti, CtCdU(L.n) mo d n Srf+g-T 5 £ t Id 
.toTtf'ip-irt^So Z (Of- -fry bfctS^Xtt. 
L t> D Offl t> SBH# 2 ©SHfefHS SrfT* 5 

[0 0 4 5] EEPJS2^@^tf#dui: (C, n, t, 
L) {C*fLTC D mod n Sr^rg-TS < 

[0 0 4 6] fc:fe\ 6tT©BEW#JH©«[^*SV^Tiai 
9m5^f7/l 9 4W^(±^Ttc:*ffl-r5, Lfc 
riSoT, XTyZfl 9 4 cDgMWft^Ml (Proverb? 

[0 0 4 7] .[2. 2. ffimttttm-?* ha;V] 

(upjs 2 *s^nsrWoje«#sw^-^ yh, m i 3 , 

019, EI 2 0) WT> &KEH3 iBE95*2 irO^fMW 
IIIIl£4fl«:fc»fTt&m-5. «TW^T*filEBJ|g2<Drt 

[0 0 4 8] f»HtJ!c*rtS0WK:*S»tSttliE«3©«iai* 
01 2*5j;tflg]2 8K^U #IBSrSl 3Jc^oT^ 
-TSo ttW»2©«/*«rBl 2*5.fcI*BI2 9K:iFU # 



[004 9] &HE3g 3 (±. BEEWtt^KSiS 2 8 6m 
(^S^l 3 1) „ rCCIi, ii*(ZflJffl UfcfiSSrW 

»BEm«««Fa52 8 7\zmmzfttic 

■TS^-irs/ KOflWSiJT-n tSrSife-C. SfS«2 8 1J: 
9iEM*2^a£{Si- 5 O^y^l 3 2) o 
[0 0 5 0] BEW«2M\ «SE«3*»feaH»*Jxfc 
(C, n) Z%:i§&2 9 2^«Lt, 1t$Rfiy#gP2 9 
9{C|E»i-5 0*^3^1 9 1) 0 fry bmm&l 2 

(^77^192) o fc/cU li«Of^ryhU4l 

Sr*J3t^-5^JtT?*)S. ^fy/13 2 

ic*5^T^H^3/5i^ (C, n) *a&5&S»±*<* 

Jt^JB (XTyZfl 9 2) db'il/X^yT'l 9 7 t>^ 
Sfc:&5o 9 2 CD^JJt LT*l7&1-5 

^y r-SrtSfc&v^&lwIis u-^TKv^Rtc^-^s/ r- 
Sr«ffcft^ri:^!*-r5tt (d 0) &|3:?&L 

t, tfr#{fcffgB2 9 9fclE«rr5 (^f^l9 7) „ 

^o^a-fcfi, ftyht, BE9i#2©#)HP rove 
r S , f-*r y r-f+JPflMB L SrfrJpgB 2 9 1 2 rtfc-fc y h 
(^T'y^l 9 3) o 

[0 0 5 1] 9 3^Hfr£*Wcf>. *Ty? 

1 9 4 SrSUfc-rs. r©*HS<09SJfc*j|-j-5^7 i s/7 p l 9 
4©»iWft^)ai«rBI2 0^f£oT»llfli-5. rt»««8« 
^§)5 1 2 4<D^2 0^§B^^g|i^fcK^tilL.fc- ; ?rCD 
Wit imet, LlrfBjeS^tlT^S^SBPfitSr 
Jt$5UT, fry b*S-5:©^-eWSbt?fc5*^J^i-S 

Lfc^-^fi, ^1©SS^SP2 9 3fClt5^TRSr, R: 
= C» mod nOJ:5l:ttJ|Lt»i«««»2 9 
9(CfB®-r5, Ut77'2 0 2) 0 ^(CR(D~ crjff^ 
Sr. BEM*2©'p©SBl«5aW|[aJ2 9 3-er-<TW-^L 
tfciV^S, ^-^s/ H t^s t =D-du (L, n) ©i 
5^-^^^^TV^5#-§•^C^i, CD mod ncoffff 
(4CtCdU(L,n) mo d n <T> X. 5 tft-^T't 5 CO 
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tf, mod n^SEPJI§2<D^-T*tf^L.T. 5E91 
^2(D*©^1 ro}H^a52 9 3T*H-^b^cdU(L.n) 
mod n t *Wm&2<Dn--?mi'£*>i£X tf+^T't 

[0 0 5 2] *^y^2 0 h«r*!9!rc 
h{£t#gBl 2 1/i^bBiJ^LT (Xr^7*20 

3) , RK^-^r-y h^m^mmx^i^tc^t^M^-r 

IH»-T5 Ut77'204) „ :;ifii;oMioW 

tc* J -tt3^x-y7 p l 94©Bllft#«-eji)5. 
[0 0 5 3] ^y^l 9 4imff^tl1tbs ^"r yf 
19 3ftj/h $tVfc t , Provers, L SrMffllgP 
2 9 1 2*>P>»BSS"t-« {X"ryzf\ 9 5) „ ^ry^l 
9 5tb<(4^-7 i ?'7 p l 9 7^HtT$tbfct>, RSri^m 
§152 9 1 «fc ?)^SES3^ji«i-5 

<&HU1f$ft: (n,^) 



[0 0 5 4] 4*iE$3tt, Sffigi5 2 8 2 KSSbvcBEHS 

^rf3 (7f y^l 33), R : =RE mo d n £ 
MS 1 <OM^gC2 8 3 -eSUt LT, -t©S"3tiie**saSfiEttf 
«fiM*»2 8 7T?fE»L-CV^Ct— SW5*»*r, 3E3 
tt^fEg62 8 5f*|gt5 (^T7^13 4) „ -gtf 

£B2 8 1 2 J:9ffl*i-So -&Lfc<^i:*lj££;ftfc»fr 
ttSEWS 2 #mW£ f*r y V SrfS o X ^ 5 i t &tH £ fi 
fca»ofc©-C, rtegt,j MVtfrZ>mtl$:\i!>t)n2 8 1 2 
.fc •? W^-So 

[00 5 5] £t±*s*t»©f|l!*/j:0!|t?*)5 o 

[0 0 5 6] *rte*«ISriI«Hw|E3fi-f5 1 . WTWirfc 

[0 0 5 7] 
[*1] 



C :— rand 
send (C, n) 
receive ii 
il := R E modn 
i£C = R 

output ' ^^J' 
else 

output * 

Prover 
if time < L 

R := C° mod n 
else 

i? := 1 

[0 0 5 8] [2. 3. S5l©*flS^ni M;U] 
(*«ES3!jSl^SfSr»oS»l#a©^-{ry K 014, 
019, 02 1) &SE§g3 kffi.m&2b<om*<Ott&<D 

mtezw$m.*ft^y~y v*m-<Dffimz&^x$m 

[0 0 5 9] «l©SWS^Bh3^l:ol>T»W 
i"5 0 f5lOMIS7°n ttBEgg 3 OBtEfllBR 

ft** 5a*T?fifc < , BEIPUS 2 OlEnflttt&ftoAff 



[0060] M^tf, ^nsg3 &m£&fn*mvLirz>\n 

L©t'y h*£ | | L | | -C-SH-o 
[00 6 1] JBlO*fK^"n ha/v©«|fiE«3©*)(BS: 
Hl4t, BEW«2©#WS:iai 

[0 0 6 2] feWZs 3 f±, BSEtif 2 8 6 T'SUgc 
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<W%Mt i me tSr^LT^-V UV^CSr^UT, 
^£EtW#iS»g|5 2 8 7tcf28!:i-S (^xs/^l 4 2) . 
#J;t»4\ r b t i m e CO^-S-te, C : = r | | time 
CO <fc 5 (-H^i-tbtf =t^o f&SiJ^GM$gB 2 8 8 (Cffigi$ 
ft-C^StMELJ: 5 hirWtv K OMSBU^ n t C t *■ 
^fc-frT, ^1SB2 8 1 J:0IEM*2^iSffi-*-5 
s/7°l 4 3) „ 

[0 0 6 3] Um^2<D^M<nW(^\±^y- y^ "1 93t 
■^tt*W©*MB0iliraCT?*)S. BEW*2tt, &ffiE3§3 
d»e>aM§S4xfc (C, n) SrSffigi52 9 2T'SmUT, 
ttf«««r»2 9 9{c|2»-r^ 9 1) „ 

y K^mSBl 2 2ASSf§Ufentc>tt/S:-t-5^s/ 
^s/ r-fia*fRJl 2 1 i»b«Lt. hS:«roTV^5 
a»fc*IJ£1-3 Uf^l92) . y h £ 

If fc&vv5§-g-(cfd\ u-^TKv^RlCOSr^LT, flt$8 
««f« 2 9 9 fciEtt-fS Uf^l9 7) 0 fcUfc-TS 
^v"y NSr«fO*§-»ctt, "f-'rv V t s BE9§S2©#MB 
Provets, hf+JPfllfftLSr-fes/ hi" 5 (* 

7-^1 9 3) „ 

[0 0 6 4] *7-yrf \ 9 3^Htf ^tbfcfe, 7*7- y-f 

1 9 4 SrHJS-fSo fBKDM&fa f> a /He* I* 
y^l 9 4<75g¥JNB##«a3rl2]2 1 tC^H". C^f> t i m 
e-Hfcm-t-5 {**rvZf2 1 1) „ r<Bttffifcf±, Cd> 

btbfc« $ coTtecotfr£r& t) fciJ-frtf J; \,\ 
[0 0 6 5] M*.fif, Cfr2mmm$L£*iX\,^X^ t i 
me©ft$«r| |l| I hi*5l-*"5*fetf» ti 
m e : =C mod 2 I IU I tC«t oTBi 9 tBi"^ i: # 
-Ct-So 1 1 X* t i m e Srffic 9 ffl Lfc L 

Ki|Ea$tiTV^5WJIB*JSt?fe«*S5!iJ!l!IStJtRL.-C^ 
^y h^-tco^-C^-Cfc-S^Sr^J^i-S (7ry^ 

2 12), rco^lj^fi, ft#JcD3tgS#J<OXT-s'7 p 2 0 1 

2 ttR t LT> R : =C D mod n £fl 1 cOjftggB 
2 9 3T?fh3fL-C, W*««r«B2 9 9»e|B»i-5 (*x 
y7°2 1 3) „ 1 2<Dm%kh Ltf^y 

WMffiXtefrotcZ. t Srlc!*-r-5« (r 1 ) 

SrfSjigLT, tff#ft«pfBJ2 9 9fcffifti-5 UxyT^ 
1 4) o dr^T^^icoMISyn h3/Wc4bMt5^T- 
•yzfl 9 4©#»lfc3MH-e*>S. 

[0 0 6 6] ^fy/l 9 4/!i53ltT^Hfcb. X'ryZf 
1 9 3 T?-fc y h £*tfc t , P r o v e r s > L Sr^^i" 
5 (^fy^l 95) , ^f'/T'l 9 5 tL<l^fy 
7 s 1 9 7 *S3SfT i£{fi£B2 9 1 A>e>«fiE»3 — 
RSriim-rS 9 6) , 

[0 0 6 7] &SE2g3l4, fiESH«2a»fe2Ht£;h.fcR«: 
SfMB 2 8 2 £S« LT, tf 2 8 9 HEfti"* 

(X^yT 0 ! 44) 0 R:=R E mod n 1 CO 



scua 2 8 3 x-tf-n lt> ci (omn^sknawmnam 

SBJ2 8 7t|E»**fCV^SCi:— Srf 5*»Sr, lEStt^ 
HSI5 2 8 (^fyT'l 4 5) a — &1-<5» 

-a-tefEPJS 2 mmWifr y V t»oti'5: t 
;h,fccOT\ r^Sftj SrE*i-Stti^5rtB^gB2 8 12^ 
ttil^tS. -flcb^v^^a-»4aEK|g2*s^/ji^s' 

Sttl^lSrm*gB2 8 1 2fabMt)irZ> 0 
[006 8] &L±.&m 1 cOxtfgT-n h a/V-efeSo BEW 

SrPfl?i-«t5tciiffli-5ri:T% JfirSft)!8ISftt©ffltTE 

[0069] u-knttm^mzmmzmft-rzt. «t 

cOi:*5t)T-fc5. 
[0 0 7 0] 
[*2] 

C := rand| | time 
send (C, n) 
receive i? 
R := fl^modn 
ifC7 = /2 

output ' 
else 

output ' 

P rover 

if Cmod2ll £ H <L 

iZ:=C D modn 
else 

J2:=l 

[00 7 1] [2. 4. ^2(0^sg7°D 

(^V^-?— X*— Klrof^j' h» 015. [2119. 11 
2 2) ^2<O^ISy'D h^/Kli^ IEM#JWJC*5l^T, 
BElW«l2*sai«-*-6IEW««f4, BBEflMRlC^y h|g 

ft 5. 

[0 0 7 2] :©^a ha/^i|EMIl2*»e>««E«3 
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[0 0 7 3] ^2CDMK7°n ha/KD, ^SESg 3 ©3M1 

[0 0 7 4] &H2§3 l/y^C fclSfiEflr 

2 8 6T'^LT, fgfiEtf fg&tfgB 2 8 7{ifH»i--5 

(X^s/^l 51) , &fEL<fc b h-TZ^^ y hcDl&SU 
=f-n t^LfcCSr-a-^itT, j^fa SB 2 8 1 J:9 IE^§S 

[0075] BEw«2o«ia©«E*tf±, $mv>*mmh. 

7.7- y7l 9 3*"Crat-e*)5 0 S9IS2tt. &!E3g3 
^fejtff $*Wc: (C, n) Sr£fga$2 9 2"C*ftLTv 
fll*«#«2 9 9fc«Eflrt-.5 (^7^19 1) 0 f-*r 
y hSftfBl 2 2{±SmLfcn(cM^1--5^^.y NSr^ 
4ry 2 l^^LT, *-*s» hSr^foTV^S 

5 *^J3£-t-5 UfyT'l 92) , *J3t©jg*4: 
lsXttlfc-fZ>?-!ry hS:JSfcifev*»£-KH\ i^jKV* 
Rt-O^fJ^LT, flMr«*S«|52 9 9fc:flEtt1-5 

9 7) 0 LX^tSf^ry h«r» 

o^a-(C(± s firj-ht, SEW*2©#IWP rover 
S» MWBflMlLfc-fey Ur^T'l 9 

3) o 

[0 0 7 6] ?fyyi 9 3^Hff $^fcfc, 7.7- y? 
1 9 4 SrHfTf-So ^2cD^8g7 B t3 h =/HC*Jtt5^x 

•y/i 9 4<D^m<oumttm*m2 2i:«otRflt 

5o Ld^SitJtriLfc, <8liE»3fcj£tiW-3,?« y-fc— 
Mt, CfcSrfe-g-LT, flmftKfft2 9 9 KEfirf* 
Ufy/2 2 1) „ CtMroi^C^ftli, C : =C 
I I ^-a-LfcC§r^oT, IB 1 

<Of^MU2 8 3t-*J^TR : =C D mod n Srfrg 
tt> flMR«»ffl 2 9 9 fc3E»i-a (^ryy2 2 
2) „ ^2(D>Pj-|g7'n haM^-ltS^f 

S/7°l 9 4 0»jNBJiC#«T?fc5„ 
[0 0 7 7] T^J-y^X 9 4i>mff£tltz.t>. 7.7- yy 
1 9 3 X'± y h Zivtc t, Provers, L Sr^^i" 
5 Ufy/l 9 5), ^.r-y-T*! 9 5 t> L< fi^xs/ 
:Tl 9 7*S3lfT$;h.fce>, RSr3HfSB2 9 1 «t 

3— inm-ra t^ryyi 9 6) 0 

[0 0 7 8] $8183 ft* EW«2*»e>il6«$*tfcR«r 
S«SB2 8 2fSjfLt 1 tf$g{£*?fpi2 8 9(^12^5 
1^7771 5 3) „ R : =RE mod n 1 <D 
2 8 3 Xff» L-T (^f 5 4) , Z\<DftM- 

*ixfcR©±te©ffi*s, BfEtiMSftttft! 2 8 7fc|E»£ 
rVCl^SC t-Sc-t-^r tSr, jEStt«SE« 2 8 5 T^J 
Ufj'yi 55) , — &LTl\h,FfR©Ttetf> 
tfr <fc 9M£r&9tHL.T (^7^15 6) , (±5^28 
1 2i5UJ*i-5. -ftUTl^j:»t*btflElfl«2*s^-» 

Srift!*i-5m;&«rtiWJ«2 8 1 2 J; <9 Mt>irZ a 



[0 0 7 9] 6t±*SB2©»»5 r D h3/u-e*>5. afcr 
n hrvMcfcSi, BE9!» 2 y hSr^orirSrffi 

[0 0 8 0] 
[S3] 

AM fen-. (n,E) 

mft: M(=L) tL< 'MSb' 

C := rand 
send (C, n) 
receive ffc 

iffl = <7||M 

output M 
else 

output ' 

P rover 

M :— L 

R := (C\\M) D modn 

[00 8 1] [2. 5. m3<DttWiZfa h=>W 
(&\i^X<D\s\m&m<D*?->r-y K 016, 019, H) 
2 3) I3©»M/p r-a/UT-fi, ^ y H^LTIE 

«BE»3*S|*J«4fe«©H3WSrff*5. rtaMKtttoKK* 

fctto. i©»««#SrtSo»BE«3Sr<l*«i*«Fo«MiE 
8 3 i: Pp^ 0 

[0 0 8 2] *®1*«ttf«Srt*fc>!CV^IE»3 i 

[0 0 8 3] «*.f£» SEBJH2 *s»ortfBJttJ»*«»Wf 

[oo8 4] fem.&3<Dmm*&u.-rz>wm%WL* 
(6, v) tLx. mm&3(D<&mmmzttm-r54;M 

tfM$£r ( £ , v) t-fSo fcfc'U £ 6 = 1 mod 

i (v) -cfca. mm-tzj-'Ty hmmmuz^ & 

fE3£3©#mtW«©<£Mtff*8 (v, £ ) rtgB^ffiT* 
= v I | £ I | i ©ipt«!^ttiJ§, ^ti^tivm 
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« •> an-;: ms<DM^yo h^/wmm® 

3©#«S:iai eJcfto-CttWL, BEWil2©#IISS:H 
1 9{C^oTmBJ-r5 0 

[0 0 8 5] tt, ISIEtf $S£j£§B 2 8 6 t?^-y 

U^CSr^/fcLT, BtEttrttif^tt2 8 7 frfRfctS 

(^fy/l 6 1) „ ^SELi 5 KOBSKU 
^•nt^LfcCSr, *tft-CiS«852 8 1 J: 9UW« 
2 3 6 2) o 

[0 0 8 6] SEB^2W*aac>n?ttK±^xy7 0 l 93J 
-etift^O^K^JtlUDT'fo^o BE9!«2H\ &5E3§3 
!i^^m$Hfc (C, n) SrgffgB2 9 2-CSff LT, 

tt 2 9 9 izmm-tz (^f!/7i9i) „ 

Tv Y$mn \ 2 li^ilt. T-Jry h£l$oT^.3 
3 3 (xt^i 9 2) o *f/Si"5^^ 

T, 2 9 9\ZfS.mi-Z (X^y^l 9 7) . 

hSrJ&otfr&KlHu ^yht, EE9§# 
2CD^JWP r o v e rs> F- faAPtS $R L &rir y h 

-FZ> 93) „ Prove r S (D-fe M-<fc 

ot, L J; 19 i £ v t £ Sr^t) Itito 
[0 0 8 7] Xts/:/1 9 31>mft£ixtch, 

1 9 4S:Hffi-5o IgSO^ggz/n h r^Mc&tt 5Xx 
s/^1 9 4©PiNBfc3Mli£Hl2 3 K^l",, BfEflmdkjft 
g|S2 9 6T'f^WV^Srft/gLt, SB 2 OSfiEtftttft 
#&2 9 8MIE$i1-£ (^^5/^2 3 1)„ x ft, 

s t?^ Lfcft#)cD2t!S0ij{c ioit s c (D$L&.k m 
3 2) . 

[00 8 8] &EES3 % £r§{f gfS 2 8 2 T-gffi L 
■C, tiMRfiHt»2 8 9fcE»1-5 Ufy/l 6 3) „ 

y hSr^oTV^< T, Rt LTOSriilofcr i: 3r;RBk 
-t-?)<0-C% r4£$jj ^Sft-r5f±l^^ttl*Sl5 2 8 12^ 

2 8 4(C*5V->TU^^K>'^ p $: x 
[0 0 8 9] 

[ftl 4] 

(0 : = x 1 mod u 

«52 8 1 J:5BEM«2^afe«i-5 
[00 90] SEBJII2 tt, p SrgfBgB 2 9 2 "C£fg L 

^2(D^gB2 9 4f 
[00 9 1] 
[SSci 5] 

p : = p' mod v 

fcfrJM-5. Sf2©»aEttf««^ffl2 9 8K1E»$HT 



v?Mfc 1 ^ffLT, WfSiK^A2 9 9(C|E®-T5 (* 
f5/7"2 3 9) „ *J3£^*i! LT-Si-5»&U:tt» 

S>7"2 3 5) , F*9gP^«i*^gl5 1 2 4ffif 2C«| 

>- hf 5 (^.^•y^ p 2 36) „ Xts/:/2 3 6 t> L< f4 
^f^2 3 9iS38tf*ixfcfe, i n offlSrLJ:t)#b 
Hfc±PSfiS i kit®.-??, (^f7/2 3 7) o 
2 3 7 CDJtgf(D^*t LT, i n (DfiSi45 i $kT<Dig& 
f±. ^iroj*^SB2 9 3 t'R : = (C I I M) D mo 
d n£tmLT, W«BfiM$Al2 9 9 (cSE®-f-5 C*xs> 
^2 3 8) 0 Xt 5'7°2 3 7<OJfctSE<Diii§*i LT. # £ 
V* i i £ <9 vv»£-te, rtAttflHMtffi 1 2 
4i0 i n «|EtftfS«SrPa*U-C (xfy/2 3 1 
0) , f-*r*j 2 lfrb tSrHUIfcLT Ury 

^2311) „ R©ffi«rlte»3feLT»#fia$8B2 9 9 
(xry^2 3 12) o HtW, g?3<£> 

mis-7°d h3;w:*5i«^T77'i 9 4 <omm^mx 

[00 9 2] t£tS y -kVWLWX'te i n^JWffiOfcR^ 
£*/hSrJfci£LT^3^ i nO^fltSr i tcSi?gL 

[0 0 9 3] Xf?7"l 9 4*5||fT$tVfcb, X^s/7 0 
1 9 3 T*-fe s/ h $ttfc t, Provers, L SrJWBsH- 
•5 (Xf-yyi 9 5), Xt 9 5 tKlixf 7 

T'l 9 7#9ffi£1Mt.b* mtM2 9 1 A»fe««E«3- 
RSr26f9i"5 (XT^yi9 6) . 

[0 0 9 4] ^EE^3tt, BEW«2d»fea6«S*b/tRS: 
SfsSB 2 8 2 I'fif LT, HmVffito2 8 9 (C|a^-T?) 

(.^"ryzfl 66) 0 R:=RE mod n £B 1 » 
8S»«|J2 8 3-Cfr*-r5 Uf-^16 7) . r<Dfj-^ 

a*w±it©w*s» igsEtf*«^2 8 7\zmm$ivx 

ir^SC t— iS:i-5d»Sr, IE3tt«ME»2 8 S^^i-S 
(Xfy/l 68) , -&-*-5«^f4BEM«2*s^r«u!c 

LTSOtilLT (Xf^yi 6 9) N til^a52 8 1 2^ 

2>iU*^m^gB2 8 1 2fabtiit)1rZ, 0 
[0 0 9 5] Sk±&m 3 CD*f8g^D h #*t 
ZftofeUm 3 (4»:fc t>ixfc|H]Sc«lt , s/ h cD&fiE 

5 0 
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[0 0 9 6] [^4] 

SEES 



C := rand 
send (C,n) 
receive x 
p := X* mod 1/ 
send p 
receive A 
i* := Jl^modn 
if R = C\\M 

output M 
else 

output ' ftlgb' 

Prover 

X := rand 
send x 
receive /> 
p:— ff mod i/ 

if p = X 

*n := •» + 1 

Af :=0 
else 

Af := 1 
Hi n <i 

«:= CC||M)°modn 
else 

free in 

delete t 

R~ 1 

[00 9 7] [2. 6. ffMWMKT 0 * ha*] 

(.n^m^!m^m^M<o^ -y k mi 6, 019, 

El 2 4) ^4(O^IS^t3 h^/V-C'tt, ^3W^-fS7 P D h 

So 

[0 0 9 8] ^(D^-d h=/H?l±«BE«3*»e>BEW#2 



<5o 

[0 0 9 9] miciotf^-y bOWfr^'r-y bW 
$ • 36f?3£11i8S— fifrfcfcfS, -tw^y has«S2btefc 

ofc«^, bft& - &nmmz£zmtit£<nr », 

[0100] SEES 3 ©»«ISr«iE-r«'»«»«© 
(5, v) jS£WekMffim<D (t. v) % f-*yVW!h 



« 



2 8 1 3£VAJj£inX. AMtm&&1®2 8 1 1 KB 

[oioi] ^n§§ 3 itmmm 2 8 6 x-^ ^ 

(^f^yi 6 1) „ &IEL4: 5 ttSf^y h cofffiSU 
fniMLfcC?:^ * t ft"C26ffi §15 2 8 1 J: <9 EEPJ3§ 
2^j£ff-f£ (^f7/162) „ 

[0 10 2] fiEH#2tt. *BE«3A»e>aHlS*tfc. 

(C, n) SrS:{fSB2 9 2fSffiLt < tiHR^fEB 2 9 
9fclE»-t5 yzfl 9 1) . hgg^gBl 2 

2 »4gffi Lfc n \Z.*tfc-f?>*?y- y V -y bfkftM 1 

2 l*»t>JgU-C, ^^-y h$r#o-0*<5*>£ 5 
1"5 Uf?yi 9 2) 0 MKtSf^J' hSr«pfc>fcV^ 

9 9{C|afiki"S fr'f-y'?! 9 7) „ a-JCi-S^^ry h 

sr^o^-a-t^ f^yht, mm^2<DmMP r o v 

e r S , f-*ry hW-JnttftRLSr-ty hi"* (^s^l 
9 3) . 

[0 10 3] Xry^l 9 3&nft£fttct>, 
1 9 4 5rrfTt5. m4<Dttm-7v b^MOSif^^ 
7^1 9 4»i^»/£#JHSr02 4lCftoTtft9J-t-5 0 B 
2 9 6-e^^U->'v ; xSr^L-T, SB 2© 
«BEtt*fiM**|J 2 9 8 5//241) „ 

£j£Lfcx£rMft«B2 9 l*»fe«liE«3^a6ffii-5 (* 
y L -yzf2 4 2) . 

[0 1 0 4] 8MEB3f±. % £gff g& 2 8 2 T'Sff L 
t, iWfgffcfSgB 2 8 9(CfBfei-2) {^7-y-f\ 6 3) 0 
xtL-TO £g« Lfc^(± v 2 dS^-jr y h 

o"CV»4<T, Rt UTO^^ofc^ i:£r;§;9fc1-£© 

x% r«s«u sr**i-5m*srta*«B2 8 i 2*»e>m* 

SrSH»i-5 Ur^l64) . JB2©8K*3B2 
8 4 tcfci^Ti-'XTK 

[0 10 5] 

[*1 6] 

p : = X 6 mod v 

-a-(-[±$btc, ^2©SmgB2 8 4}w*5^T, 
[0 10 6] 
[117] 

p : = p s mod v 

s> h©«*©JS*«rtT^fc<^»&fctt/i : = 1 t LT, 
fry H©*#©5fe*fcfTl^fcV^§*fctti* :=2iL 
t, 

[0 10 7] 

[1181 

/O : = x** mod v 
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fcfHgLTfcllltrcfcS. ^f»^l 6 4T'ff^L/cp 
SraMi»2 8 1 «t9BEW#2^2HBi-5 Ur^l6 
5) . 

[0108] EE9Mi 2 14, p SrgffgB 2 9 2 T^fs L 
"C, flM8ftfttt2 9 9UUE«Srt-S (^f?/2 4 3) „ 
£ 2 ©85gg($ 2 9 4T' 

[0 10 9] 

[*1 9] 

p : = p 1 mod f 

SrfhJIUT, Sil2©lSIEif$8{&WlHS2 9 8iCf2»£HT 

4) „ 4 4 ©^JJ&Dii&fcriS— %ctZ>ifr&te 

(4, MI^OSr»3tL-Cfll#««FaJ2 9 9fc|E*kUT, l*J 
»«t«B«^SH5 1 2 4 fCSttfc^iXT 1^5 i n ©{tt 
Sr-TV* y ^ >- hi"-5 (xf^2 4 5) 0 Xry^2 

2 9 4T* 

[oiio] 

[fc20] 

p : = p e mod v 

8) . ^^-y^2 4 8(D¥UScOie**5-&-r?,^tC 
(4, Mld0«:«j£LTttf*«tS»2 9 9^fS»LT, 1*3 

tv^*^y^ i n ©tt£-0Kf8:5g1-3 (^f^2 4 

9) o y/2 4 8©«roiei:i!-SUi^i; 
(4, 7< -y±— i?M\£ 1 $rK^LT, 1f»«itgB2 9 9C 
ISffli:-r5 (^^5/7*2 4 11). *.=ry?*2 4 5 t>L< 
(4^.^5/^2 4 9, 4 1 1 i>mff£iv±lb. 
i n ©ttSrLi9»feixfc±|Sffl[i 

^2 4 7), ^f'//2 4 7©JtU©igftLt > i n 
i £4T©»g-tt\ ftl0&3MB2 9 3fR : = 

(C | | M) D mod nSrff^UT, ttffftj^|l2 
9 9{CiB®-t-S (Xf77'2 4 8) „ Xfy/2 4 7© 
JfcRoeSi Lt. i n ^ i J:9t>*#t x *& 

(4, R©<it& 1 fcK3eLTtfr#««F»2 9 9 fclE«-J-3 

Ufy/2 4 10) , w^f fi^4©Sffi/n ha 

Mz.tem>7*7-y7\ 9 4©ffiMPifc#JW-e*>5 0 

[0111] 9 4tf^ft£i%tcb. XTyZ? 

19 3 "C"tr y b Ztvfc t , P r o v e r S . L ?rMI^-r 
5 (^•XS'T'l 9 5) „ Xf*//1 9 5 t, L< (4^^y 
^1 9 7^HtT^tbfcb, -SimgP2 9 1 *»MfcBE»3^ 
RSr2imi-5 (^fy/19 6) . 

[0 112] ^SE|g3l4, iEM«2*»ba&«SixfcRS: 
*««2 8 2(cS«LT, 1f^iS^gB2 8 9 fclBfik-f* 

(^fy^l6 6) , R:=RE mod n 1 © 
^SB2 8 3-CIHM-5 (^fy^l 6 7) „ Z.<DfbW 
te*0±ffiOtfr*s» VtElimiM9tt2 8 7(C|E^$HT 
v*SCt-Sr*-5a»$r, IES14^iESB2 8 5 X^J^-TS 
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6 8), -gr*-5*&l±IEW«2^a4 
?-tr-y h&&^X\,^Z>~kfr^£ih,tc<DX\ ROT-firo 

LTSOttlLt (*x-y7°l 6 9) , mt)U2 8 1 2^ 

$Htfj«:tttfjSl5 2 8 1 2*»e>m*i-5. 

[0 1 13] U±&m4<Dftm7'v h="^X'hZ> a %A 

A*: /»€ {l(©a<0JH»tt*),2(lHl«tO^lfi*)} 



t, inWDJMfflSr i fcRjebT, *x ^ 2 4 5 

^{f9t?»±, 9cDggc©?EJ»Bf i n £ i 

fcNJfc-fS. $ h\z.m<n>^mk Lt> 4 9 

©£#©as9tl*fc i n ^ i SriP*.5*ftt>*>5. 
[01 14] 
[*5] 



C := rand 
Bend (C,n) 
receive x 
p:= modi/ 
send p 
receive il 
J? := Ji K nwdn 
if R = C\\M 
output M 

else 

output ' 9kW 



Prover 
H|e||t :=Z, 
X :— rand 
send x 
receive p 
pi— p* mod v 

ifp = X 

t« := «» + 1 

Af :=0 
else 

p:= ff mod e 

Af :=0 
else 

JW := 1 

fi:= (C||Af) D modn 
else 
R.= l 
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[0 115] [2. 7. ^5 0^tK7°D ha/W] 

YWrf-trv K IDl 7, [2I19, HI 2 

5) ^5©^d ha/ux'ji, mmzft^mm^iztt 

[0 116] -^fmm^KML-Xh^-^'y h 

[0117] mEm3<D&m*&m-j-%¥fmme> 
(s, v) &£rMkfflmm(D u, v) , 

£01 7{:it£o-CiftBJU Hi33S2©#IltI<|r|2Il 9 (c^ 

[0118] &U3£ 3 fi, igSEtf ntkf&ffi 2 8 6 T'^-Y 
u->-^C<Sr±j&LT. fgfiEtW«^a52 8 7 KfEfiH-S 

UfyT'l 71) 0 k-fZ^try hOstgiJ 

T-n££/£Lfc:C£, ;££:#>Ti£«9$2 8 1 X <?§EW^ 
2^mm-f% 7 2) „ 

[0 119] E9JS2W\ ^E^3*^^f iStltz 

(C, n) £SmSC2 9 2t*Sf L-T, tf #^g|5 2 9 
9tefBfei-5 o h8img|5 1 2 

2 1 ^b^LT, \*&ftoX^5fr¥ ofr&mfe 

(^^s/^1 9 2) „ MJS-t-5^s/ hSrftfc&i^ 
^a-ictt, L^tK^R^OStIS^LT. tf*i£t#gB2 
9 9^fS»-t-2> O^s/^l 9 7) „ *fjS1-£^s> S 
£^o^(i« % ^yht> HE9m2cD#MSP r o v 

9 3) o 

[0 12 0] 7f y/1 9 3^Htf$ttfc^, 
l 9 4 SrHfirf-So 3?5<o*l-l£:/n h^/Wciolt?)^^ 
•y^l 9 4 <Di¥*B^#IHSrlH 2 5 tc^-r o fg!Etif$B£/& 
§B2 9 etft^^z&t^Ut, If! 2 OBtEttMRfil 
«F»2 9 8fc8B»i-5 (XTy/2 5 1) „ £/&Lfc;c 
£&mg(S 2 9 1*- P>^|jEI§ 3 -^{f -T 5 (^f y/25 
2) „ 

[0121] ^rnEIg 3 W\ % fcgffigB 2 8 2 -eSff b 
tW$S^gB2 8 9i^fB»i-?. (?T7/1 7 3) 0 
xiUO Srgffi Lfc^-fi, fiEBJS 2 tf*^ y 
otl^<t, Ri: LT0 5rSofcr t ZMyn~fZ<D 
X\ rte^jj 5r^*i-?,m^Sri±i^§B2 8 1 2frh\tit) 
LT, *j-ig7°n ha^Sr^T-f-So IS 2 <Di£gg|5 2 8 4 

[0 12 2] 
[«SC2 1] 

# : = x 4 mod v 

m§fS 2 8 1 £<9?iEW&2~*mmi-5> Uf^l7 



5) „ 

[0 1 2 3] BE9§#2f±, p SrSJfif pB 2 9 2 "CSfif L 
X. flt4RfiM$tt2 9 9tffiSt5 5 3) „ 

Jg2«)St[|Fffi2 9 4f 

[0 12 4] 

[»2 2] 

p : = p l mod v 

5rff^U-C, 2(DfgSEtW$gflM s Sg|5 2 9 8lCfEfik£*xT 

4) 0 *^y:72 5 4©*J£©ift*#— 

UT7^2 5 5) o ^T'^2 5 4 0fl£©^- 
ffcLftl^»^i> L<H^^s/7 p 2 5 5i>mft£*itcbs 
ftnVtWt&ftUl 2 4^5t^$HTV^5 i n (D{jttLJ: 
<9mbtltc±mi&i t&ik&i-Z (^T7/2 5 6) <, 
7fy7'2 5 6CJt|i©mU 1 i n ti!)5§L< 
^V^-g-fi, ^lCO^g|52 9 3T*R : =CD mod 

n£f+@LT, tf«^«fgB2 9 9^ffift-rS 
^2 5 7) 0 ^fj/y2 5 6roJtg©SSi:tt, i n 
ti^U^ll i n £0ic|$^LT (^^s/^2 
5 8) , ff? 1 WM^gP 2 9 3 X' 

[0 12 5] 

[f!c2 3] 

n 2 

R : = C mod n 

510), ;:ST'j)^5©Mgyo 

ry/l 9 4<Dm!Wte^mxibZ><, 

[0 12 6] ^t-^19 4^^fT$tufc^>, 7*7~ y~7 
19 3 T"t h Zivtc t, Prover S . L SrJSB&l" 
3 (^fs'7'1 9 5) «, ^=fy-7°\ 95tL< \^f-y 
-f\ 9 7t>mft£tltzlb. iSm§B2 9 l*^^|iE||3- 
RSriHm-1-5 (^^s/^19 6) 0 

[0 12 7] ^IE§§3(i, mm^2^hmm $tbfcRSr 

smss 2 8 2 trgm lt, tw#^gB2 8 9 \cm»-fz 

(77^176), R:=RE mod n £^ 1 <D 
J&ggE 2 8 3 T-ff^ LTtf mfcftU2 9 9 ^12^5 i: 

th\z. -(D^nmm*.. mmnmvmi®2 8 7^is® 

£;h/C^3C t-ifci-5^Sr, lE^tt^EEgB 2 8 5 T'^J 

Uf^l7 7) „ -gc-rs#^-f±, o^m^ 

^ 2 8 1 2/5^m*-f-5o R : =R 

E mod nSr^l 0^»g|52 8 3T*$ ^(CtmLT 
ttf#ifc£fg|5 2 9 9 tifE»-r5 i t r©fffiif 

igffitW«^gl5 2 8 7(CfE»£HTl^.5Ci-§!rr 
5*>£, ES+4^tiE$|52 8 5ffiJ^t5 (x^-y7°l 7 
8) „ ^yzfl 7 SVte^tf-gi-FZtgrfrlZ. 
2<D^-^^ N^^(75^^jgUfcr b*^i-<DX\ 1 
S:tii^?FB2 8 1 2 TJ^titfj-rs, ^^s/7"l 7 8 <D«S^ 
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[0128] fini^ms^atB^ci ha/v-efcio — s [0129] 

(7 := rand 
send [C, n) 
receive x 
p ~X* mod v 
send p 
receive R 
R — R E modn 

irc = R 

output 1 
else 

R — R B modn 
ifC = JJ 
output 2 

output • ^Sb 1 

Rrover 

X ™ rand 
send x 
receive p 
p := mod v 

i n :=i n + l 
else 
if» w = « 

n 

in := 0 i 



else 

it := C D modn 

[0 13 0] [2. 8. JB6©»»^"n ha/V] 
(ttHtTO^y^-T W-Kfif^yh, 018, H 
19, 02 6) £©«Wfc*S»*5JB6©*HB:7n M/V 

3o 



[0131] — ««J*ttBE#H»UTt>^y h©*3b 
[0 13 2] drofcflg^n ha^T'fi, ttBE»3*>e>T 

[0 13 3] ttEE$3©tttt&«MiE-t-S4*tt1ft*© 
(5, v) *j«ttf4iHfll#© ( £ , v) , ^yMiib 
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O&IiE* 3 ©#1013:1211 8fr. SEW#2©#JH3rig 1 9 

[0134] ^SE^g 3 f±, BEElffS&jfttt 2 8 6t*f^ 
UVi?CSr^LT, fgfiEffittftfttt 2 8 7tcf2®-T5 

(^f^l 8 1). ilLi 5 fc-t-S^y HO«giJ 
^nt^UfcCSr, * t «)Til6mSB 2 8 1 J; !J SEW* 
2—i^{f-f5 8 2) o 

[0 13 5] BEW«2»±, ^iE*3;6>f>^mSixfc 

(C, n) SrgftSB 2 9 2 -CSm LT, flMRfiM$8B2 9 

9fciE«i-5 t^f?yi 9D o fry hmmm 2 

2 l±Sm Ufc n K^-fS^ y h *f->r hflM^gB 1 
2 id»e>SEUT, 9^y hSr«ro-Ci^5d»if5*»S:*ll3fe 
■f-5 (^r^l 9 2) . atJS-fSf-^-y hSr^fcfcl^ 
U^^V^RICOSrK^LX, flftRfiM$ft!2 
9 9tCfE®:i-5 (^y^l 9 7) . f->ry V 

*«PO»*fcf4 x f^yh, BEW«2©#J(llP r o v 
e r S > */ry httJPflMRLSr-fcy 
9 3) „ 

[0 13 6] ^ry/H 3;&sS!tf£*tfc£>. ^ry/ 
1 9 4£HtT-r3 0 Sleo^fS^a ha/PlcjSttS^T' 

y^i 9 *<r>nwi.zm&m2. eizieo-ciwi-rs. s 

BBE«*fiM*» 2 9 8 Uf^26 1) . 

£j« ufc x *m%n 2 9 1 a^i^se^ 3 -s&m-rs c* 

fy^2 6 2) o 
[0 13 7]«ffig3(4. %£g«g|52 8 2t'§«L 
T, tiNWM$ffll2 8 9 (*xy:/l 8 3) , 

x t lt o srs« ufc»a-r±, mmm 2 s/ h &n 
-e, rtfjjbj s:5s*i-sia*srm*iBJ2 8 1 2*»&a* 

Lt, atlSyu ha^SrUn""*-*. A^3§B2 8 1 3 «t 9 
A^$tl/TA^)1ff#^SI5 2 8 1 1 d^«>IEii£;ft,T^ 
fc^yt-v'M^tot, ^2©»gg|52 8 4te*JI^T 

[0 13 8] 

[gc2 4] 

P : = (* I I J")* mod v 

Srfh^-TS 5-/184) o ^-Wlstclsxtf^x P 

*mtU2 8 i j: 9mm&2~*mm-rz uf^is 

5) o 

[0 1 3 9] mW&2t±, p £Xmg& 2 9 2 T'gff L 
■C. ttS8<Sl#g|5 2 9 9(C|ES8H-3 UT7/2 6 3) „ 
B 2 ©SSgSS 2 9 4T* 

[0 14 0] 

[t25] 

p : — p l mod y 



64) „ *2©BIE«*«»SB2 9 8|i«E»$tu-CV^ 

SB 2 9 9l,zmm-tZ> Ufy/2 6 13) . 

6 5 ©JpJ3£©ife*^-Srf 5«#fcf±» p ©-RfcWtfr 
Offline, i n WffiSri n : = i n - M ©J;5(c 
®£-T5 6 5) . M : =0 | | i n Sr»^ 

It, «*«»«B2 9 9»CfB«rr5 Uf^26 

7) „ in^CttJ/h^l/^^J^-fS (^7^26 

8) „ 0«t!?/h$^»a-(c:»i, rtaMKffiffiH$« l 2 4 a» 
"b i n Sr*»L-C 6 11) , <^<iry hfiHS 
S12 1H tZUm-fZ (*.7-y72 6 12). 1^1" 
tMOm&X'h. $$l<om&&2 9 3fR:= (C | | 
M) D mod nSrfWUT, «*»mi52 9 9fclE 
AH" 3 (^fy/2 6 9) . r - ^T*^^ 6 (DMU^° 

Y^MZ$S»Z>*7-y7*\ 9 4©i¥*0/£#flB-Cfe5. 

[0141] *<f-yf\ 9 4^HtT$*bfce>, 
19 3 T~fe y h £;h,fc t , Provers. L Srjgi^-f 
5 (*7-y~7\ 95) . ^T- S /^ p 195t>L< [±^7" y 
•7*1 9 7*s*fTSttfcb, ««lfB2 9 1 /J>ib1$f^E3g3 — 
RSri£«-r;5 (Xf^l 9 6) . 

[0 14 2] ttEE«3tt, HW*2^b^fS$*tfcRSr 
SmSB 2 8 2 i'Sm Lt, If m&W& 2 8 9 tEArf* 
8 6). R : =RE mo d n^H© 
«»g|5 2 8 3 Tiff L.Ttff$8{S«F§|5 2 9 9 \zm&T& 

C^-ry^l 8 7) . r ittwjffas, BSE 
ttf*fiy#SB2 8 7lclE»S*bTV^5C t-iki-5^Sr, 
3Ei!itt#BESl$2 8 5t'flSt5 frTyZfl 8 8).- 
R©T{fc©«f*»feMSrBl9mur (^x 
yzfl 8 9) , tH^§B2 8 1 2^fem^-f 5, — ftb* 
^^g-H> rtegtu ?ric*-r5tU^Srtil^gi5 2 8 1 2*» 

. [0 14 3] W±^6©*fgg/n ha^*5. ttEE 

try K^ioT^^^^cD^coHtf^MSrStM-e^ 

©*V^|E»3-et>, U^^K^pl-jia/ifit (^J^ltf 
1) Sr3*5rt-e, ^^>-^cDft§r^M-&-f{c, 

[0 14 4] 
[$7] 



(21) 



8tE» 

mx: Mi>u<n 'Star 

<7 := rand 

send (C,n) 

receive x 

P ~ (xlW modi/ 

send p 

receive R 

R := ii^modn 

if H = C||Af 

output Af 
else 

output T SUSb' 

Prover 
X := rand 
send x 
receive p 
p := (f modi' 

*n :=*«-/* 
Af :=0||£„ 
if»« <0 

freet, 

delete t 

else 

- Af := 

R:== (C||M) D modn 

[0145] [2. 9. #7.©*|jg:7n h=/V] 
W^W^!)^^ K*- KI<Df ^7 h, HI 
8, 019, 0 2 7) r.W^^{C*Jft5^7©M2S7 p n 

■So 

[0 14 6] ^eO^j-IS^n f»a/H:|BM*fc, — jttWfc 
[0 14 7] ^W^gg^o h3/K'(±, ^sES3*^"BT 

[0 14 8] ttKgg3®4$ttfrftiE^34*tt1ftff<0 
(8, v) *J±tWtH!«*© ( £ , v) , 



S/c N3/v©&Sfc8&3©3MW§:01 8 1c, fE91&2 0 
3«£0 1 9 

[0149] &IiE8g 3 f±, SSEW^^SB 2 8 6 
U^CSr^ffcLT, fgfEtn«tS^SB2 8 7 ^lEgprTS 

Urj/T"! 81) „ 1&ffiELJ;5 KafWW 
^nt^fifcLfcCSr, * t *>X&t3to 2 8 1 J: 9 fiEPJ^ 
2^fti-5 8 2) „ 

[0 15 0] SEW* 2 tt\ «MEE«3d»?>afe«*jXfc. 

(C, n) &£«tt2 9 2t*Sftlt« 2 9 

9\zWtZ> {*7-y-7\ 9 1) „ =}->ry YU%% \ 2 

i-5 0*yy^i 9 2) . W&r*f-*v h&ft1tt£\,^ 



(22) 
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9 9£flBfti-2 Ufyyi 9 7) „ h 
Sr»o»&fcH: x ^?ht, EW*2<D#JHP r o v 
e r S s x-Ts/ hf>tiPtil«LSr-fes' h"t"5 (^fy/l 
9 3) o 

10 15 1] 9 3*S|ltT$tbfcbs V? 

1 9 4SrHffi-5 0 £7©*HB;:/n h 3^tjj(J5^f 
•^^1 9 4®#jU&¥JBi&l3 2 7tftotI«t5. IS 
If «4^gS2 9 6 t*f t l^y-^x W,2<D 

mumm.%nn2 9 sksess-ts (*.7-y?2 7 d 0 

Lfc x Sr26««B 2 9 1 ri> 3 ^i£{f -f 5 (* 

77/2 7 2) o 
[0152] ^SE^ 3 f±, x £rgffg|5 2 8 2 T'Sft L 
X, tiHft{Rftffi2 8 9»C|ES»i-5 (^xy^l 8 3) „ 
% t LT 0 £§f§ Lfc*-g-f±, |E9i« 2 frf->r y V 
oTI/^<T, Ri LTOSriSofcr 
T\ rMSbj «r*5H-3ffl#«rtH27«2 8 1 2d»feffi* 
tt> jitSg^P I- a/P-HSTI-So A^JoB 2813i0 
A*S*b-C7^7ttf««^«l5 2 8 1 Hc^mm^flX^ 

[0 15 3] 
[»2 6] 

P : = (x I I mod v 

£ri£{fg|5 2 8 1 £<9fEI§)m2— i£{g-r3 (Xf 7 ^l8 
5) . 

[0154] mW%s 2 p §B 2 9 2 T'Sfa L 

T, ttttfiM$8B2 9 9fclE«-*-$ Uxs/7°2 7 3) „ 
H 2 £>SSggB 2 9 4 t? 

[0 15 5] 

WfC2 7] 

p : = p e mod y 

SrffWLT* tf*^lfgB2 9 9 HIEfti-5 {* 1 ry-y°2 
7 4) „ ft 2 OBEEttftRfttttt 2 9 8K:E»3;h,-C</*3 

7 o *xy:/2 7 S^J^CD^Jf^- 



T» * y-t—i?b UTM : = 1 | | i n Sr^UT, If 
m&WM2 9 9tCfB»-f-5 (^f?72 71 2) „ *=r 
7 5<T>¥m<r>1fe¥kft— WctZifr&iZ^ p (OfiiL 
<Dtfrfrbu Srlt^ffiLT, i n CfiSSr i n : = i n - n <F> 
J; 5i-M^i"5 (^75-^2 7 5) o M : = 0 | | i n 
^Lt, 1fttt«M$ffi2 9 9{dfE»i-5 (^7y/2 
77) . i n *S0 «t9/jN$l^J^i-5 (77^2 7 
8) „ 0 J:0/hSv^»^Hf± % i n SrOlc^i-S 
xs/:T2 711) „ l/*i"*b©*&-Ct>, ^1©^S|J2 
9 3T*R := (C | | M) D mod nSrff-^LT, 
fit 2 9 9 (CfE»-T5 (^7^2 7 9) „ £ i 

$.X&$& 7 Ottnzfn I- => MztStt 5^X5X^1 9 4© 

[0 15 6] 9 4^Htr$tt^.fe, KT-yf 

19 3tt-7h t , P r o v e r s, L Srj$¥B&-r 

5 (^7^71 9 5) o *y-y-f\ 9 5tL<l±^7^ 
n 9 7&mft£tltct>. 9 1 ^btfcSESS 3^ 

RSriUmi-'S (^xs/X19 6) „ 

[0 15 7] ^fiE|§3«, M.Wm2fribmm£tltcR* 
§{135 2 8 2l;f«LT < ffitttiM$SB2 8 9tcEgH-3 

Ufy^l 8 6) „ R : =RE mod n %m 1 © 
gJ*gB2 8 3T*H-»bTtf$8^gC2 9 9 fcffififrs 

(^7?7i 8 7) o zv>ft&u%:<n±.fc<Dffi&, mm 

mm&ftU2 8 7 {£ffi&£*t-C^-5C£-§H-3 
E^tt^Eg|52 8 5T*»£1-3 i^y-yy"! 8 8) „ - 
Stf-5*fr«:» R©T<fc©ffi*»&MSrBt9tHUT (*x 
-yXl 8 9) , mXJ§B 2 8 1 2^<baU)i-2> 0 — Sfcbfc 
^tfr&tt, &*!*1-4HtfjfctH2jffl2 8 1 2^ 

[0 15 8] J^±^7(DMIS7 p ci hn/VffcS, 

[0 15 9] 

[^8] 



(23) 
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C := rand 
send (C,n) 
receive x 
P-= (xllA*)*modv 
send p 
receive R 
R := A E modn 
if JJ = <7||Af 

output M 
else 

output ' 



Prover 
v\\e := i 
X := rand 
send x 
receive p 
p := (f mod i/ 

»f /» = xIIm 

*n == *n - V 
M:=0||i n 
ifi„ <0 

:= 0 

else 

M := 
ii:= (CIlAf^modn 

[0160] [2. 10. f8W^S7'Bh3;u] 
(E*#S*-4ry h-fHMI:-&V*ftU&a. 016, 
Ell 9, 024) r©389§fc:*5tt3fS8 WStgS^o h3 

[0 16 1] ttK%3 04$tf&ftEEr£<l*ttflMga> 
(8, v) *iJ:tW^imf*o ( £ , v) , *f->ryYmh 

fg:/n h3/w©^Ug§3(0^)W5rl211 

©*IJWkSrl^?Ti-50*>Sr % &BE3§ 3 (75 A^jgP 2 8 1 3 
XVAXZtlX. A*tf*8«ft$IS2 8 1 1 fcflEft*;h/t 



[0162] 4£E3§3 tt. !S!iEtt$g4y&Sl5 2 8 6 T'^-V 

(^T^yi 6 1). ItHLJ: 5 itif^y h cof^SU 
fni4^U:C^ 4i»-Cj3rffi»2 8 1 J:«JIEW« 
2^Srf9-f5 (^fy/16 2) . 
[0 16 3] BEW* 2 tt\ *BE»3d»feiSft*tbfc 
(C, n) Srg««S2 9 lKftWR2 9 

9lc|E»i-« (^fj/yi 9 1) o h^SHAl 2 

2 l±${f LfcnlcMEtSf'Sr^ HSr*^y Mft»» 1 

(7f?/l 9 2). Mfc-fZfr-y hfcftfc&ir* 
m^\a±, U^TK^^RlCO^iS^LT. fit $g{fctf gB 2 
9 9CEfiit5 (*xy:/l 9 7) . #lSi-*^y h 
Srlfo«^{C(±. f^ryht, SEW»2©#ABP r o v 
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93) „ 

[0 16 4] *7-y?\ 9 3&mft&tlfrlb* 

SEt*«^gB2 9 6fft ^fJxZttf&lsX. Jg2© 
iSSEtf W&ftU 2 9 8{c|a^5 4 1), 

±& bfc x 2 9 i a>t,&sE$ 3 ^j&m-t-s (* 

TV? 2 4 2) o 
[0 1 6 5] «BE»3f±» zSrS««2 8 2-eS«L 
"C> ffF48ft&*B2 8 9fcEftf 5 . 
xiLTO Srgffi Lfc#&f±» SEPfl^g 2 y f> 

■C. rjijjbj S r jtft-f-5Uj^S:ia^a52 8 1 2d»bta* 

t&SE&fTplfr&fctt/t :=lt LT, h^^ft 
t5S^C(±n :=2tLt, /i©fil$rA^^2 8 1 3 

x*>^x.x^ntmmB2 8 i ik:ie«u-c*s#, si 

2(Om»U2 8 4{C:fct^-C. 
[0 16 6] 
[»2 8] 

/O : = x* w mod u 

t Ltux^ P Srf+^-TS (^7^7*164) , ft 
»LfcpSraH9SB2 8 1 J:9BEW«2-ays-t-5 
•y^l 6 5) „ 

[0 1 6 7] fiE0J^2f±, p 2 9 2 T'Sff b 

T, 2 9 9 fc8E«r1-5 (^77^243) „ 

£ 2 ©MgSB 2 9 4t* 

[0 16 8] 

[«2 9] 

p : = p" mod v 

Srft-g LT> fg 2 ©fg5Etiifi$<£j$gj5 2 9 8 (CfBfife^^T 
i^xiois, — grt-3a4^1-3 (^f-y7'2 4 
4) . X7vzr2 4 4©tll«©S*iSS— §H-5»^»ctt 

SB2 9 9fc|E»-f5. ^7 t s'^ , 2 4 4©J|siJ3t©»S*iJS— 
S Lfcmfr&fctt, US 2 OjHUA 2 9 4 tf 

[0 16 9] 

[»C3 0] 

p '. = p l mod v 

8) 0 T.Tyy'2 4 8 ©¥UJg©ij&*tfS— S-f^^^tt 

^77*2 4 9©ftb9fc» rtWii»i2 4ro^ 

SrO£t^©fli («*.f*l) ^f-77'2 4 8 

©^J^©^*/4 5 — SL-^ei/^-a-tcti, ^ y±—i?M\Z 1 
^IS^L-C, fil*«»a52 9 9tlE»i-5 (^T?7'2 
411). ^Ttl-©^-{Cjb'^-Ct,^iC^^^^2 4 7 
©ft)b i n ©flt36SOT?*>5d>»B-*-5. i n ®tt* J 
0©4§-g-fi, Jgl©*£gg|5 2 9 3T*R : = (C | | M) 



^ mod n SrSW LT, tf$g&t#g|3 2 9 9 {£|E«1- 
5 (XT77 , 2 4 8) „ inA J 0f^^tt, R©ffi 

24 10) „ r r.*-C'/55^8©^-|g7 , 'n h a/KcfcttS 
9 4©j»i»/ J c#«|-Cfc5 0 

[0 17 0] ^Ty7"l 9 4d5|?tT$ixfc6>, yZf 
1 9 3 T"tr s/ h t, Prover S , L £rA?gfci- 

5 (^fs'7 , l 9 5) o ^y-yZfl 95tL< \t^7~ y 
-f\ 9 7 2SHfr£*Ufce>, i£«g&2 9 l^b^SES3 — 
RSr&frrS Uf^l9 6) „ 

[0 17 1] ^SE^3Ji, IEW«2*>ba6«$ixfcRSr 
£(S8B2 8 2icSfgLT. W«^gB2 8 9Kl|Egi1-3 

(^77/16 6) . R:=R E mod n ££ 1 © 
2 8 3 -Ctmc-TS Ur-77-16 7) . 

*£*©±{£©#r^ BIEt!lf«««r«B2 8 7icmm$i%X 
V^SC t-Sti-5^Sr, jE^ffi£fEgl5 2 8 5T'*lJ5&-f-5 
Ur^i 6 8) „ -Sti-5*&ttaEM«2^WS»/j: 
y M:#ot^5- i^£*L/c©-C\ R©Tfe© 

UTStOtilLt U7y7*l 6 9) , tH73g& 2 8 1 2 
8 1 2d»fetH*-t-5 0 

[O 1 7 2] «±^^ 8 ©>CttS^ , n h3/VT*$)5o fl * 

>-x*i£mx$t£<t£Z<DX\ fyj'hoSMi^ 

tM«L * ¥X"5->r y V Sr^l" i" 5 ^51*5 ^ ^g- 

[0 17 3] 
[«9] 
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Xtl: v (1: M, 2: h<0*l«iffc> 

C := rand 
send (C,n) 
receive * 
p := xf* modi/ 
send p 
receive R 
R ~ R E modn 
IT R = C\\M 

output M 
else 

output ' JEgft' 

Prover 

X== rand 
send ^ 
receive p 
p := p^mod*' 

ifp = X 

M:=0 
else 

p := ff mod v 

if/» = X 

*« :- 1 
eke 
AT := 1 
ifin = 0 

«:-(C||Jl/)^ino<in 
eke 
fl:= 1 
free*™ 

[0 17 4] [2. 11. *9W»ffi/Dh3A'] 

hWfflOEltt©^, Ell 8) d©35KK:*S»* 

[0 17 5] JfcttiSya h=/V-?f*BS8ESg3©lg8EfiNB 
4i*as«s r Sr««rU Sfc-#fi14B8»Hfclfci-;: £fc 
J:oTft^Ctr4lW-5ri:i, (r, R) SrfiJ 



lft<^LgS8©:/n h3/^Tfdjgfflt?#5o 
[0 17 6] 4ftSE«3 0#ltSr«SEi-%<KM»fll«<0 
(5, v) »±, g6 4>*n£/n h=/vi:lRlDt?S>5 0 $ 

9©*tgg:/n h^/PSr, mi 8(D^|iES3(73#IBfciiffl 

©A^g|3 2 8 1 3 i ^A^J^tvT, A^tff *RtiM$8B 2 8 

1 1 fcnm&inx^^zb-tZo 

[0177] mmftm±s&i®2 8 6 tc^x, SL» r £r 

4J«U -tnSrC : =H (r) © «t 5 tc-^fittlJSgclc 
ILTfti/^CtftAU BSEtiM8#*SSB 2 8 7 fc: 

HWflWJ^nt^EUfcCSr^ S i: feTiSfagB 2 8 1 i 

9Kn«2^aMti-a (^75-/1 8 2) o 

[0 17 8] mm&2frb&t>frX%fcx*. SffgP2 
8 2 "CSfif LT, tff«fiy#ffl2 8 9tc:aE«ki-5 (^xy 
^183). xi LT0£§{f Lfc»&tt, BEW«2*s 

S*-T5©T\ r*^)J Sr#*-T2.t±l^Srm^a5 2 8 1 
2*^m^bT, ftWfv ha/^TfS. ^2©» 
^$B2 8 4}C*5V>-C W^V;* p Sr. 

[0 17 9] 

113 11 

io:= (z I I #)* mod y 

fciSfctHM-* (77^18 4) . tf-^bfcpSrig 

(s»2 8 i £<omw%s2~ mm-f*> (^f^is 

5) o 

[0 18 0] E933§2j&>ki£«$;h,fc^;*j#v;*R£g 
fHg|5 2 8 2fcSf§ LT. 2 8 9 WE**"* 

Ufy/18 6) ( RE mod n Sr^ 1 ©SSggfl 

2 8 3-e^-TS UT7^18 7) o r©st-3M£*© 
±tt©«f*^ KfEffi$Ri!M#lFI52 8 7ic|E»$HT^?)C 

jEatt&SElH32 8 5T*|i]fet5 
y/1 8 8) o 7T7/1 8 8 -C— S Lfc#^f±, *x 
•7/18 1 -C^riS Lfcft* ri, 77 7/18 6 T'tfS 
««f«5 2 8 9 £35* UfcR h LT> fUfflfESftlf * 

«»9J2 8 1 4{CfeH1-;5 0 $«bK, R©T4fc©#r,t0 

!5mL-C (7fy/l 8 9), MfiM 2 8 1 2^tiJ;>J 
t5o y/l 8 8t-SUi^ofc^ll 

3&j srs*-r5m^srm/jSB2 8 i 2^? 3 m^-r5o 

[0181] J^Ji7JS^9©*)-te7 p D h=i/vSr, mi 8© 
[0 18 2] tOi^t, *IJffl#if^aA 

h©WS#t^tiii£i&)&^©^y hSriSf+JfeV^U 
*-y hfom&f-trv h©SlS«{ctaS-f5©T?, ^©SESJ 
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[0183] mmmmmm^nu2 8 i a Kvsmztiz 
tcxmm £ titcmmx'h o-cti^u -ett^ ©tw$g© 

m^3: M Sfctt invalid 



[0 18 4] 
[*10l 



r := rand 

C := fT(r) 

send (C,n) 

receive x 

p:=(x||/i)*modi> 

send p 

receive R 

ir R E madn = C\\M 

output M 

store (r, R) 
else 

output invalid 

[0185] [2. 12. f 10©»M/Dh3/V] 
(ty^-flSo/y^ K#— KM^y K Ell 
8, 0i9, 02 7) :©Mctei^SioroW 

%9<Dmm-7ti h=/HC*J{t5, #$g£ 

[0 18 6] *ME»3©«IiE*ffiH:£9©:7'n h=>^^ 
ID C-e «Tf4tiEW3g2©:/ci F- 3/u5rl£f£]-t"?> 0 
[0 18 7] tttE#3<Pttttfr{Sffi^24$tttiMB<Z> 

(6, v) *si^Hn»«© (£, v) . hmm 

t*$8Lf43?6©2tfS7°n h=i/Wtp)CT*fc-5o 110© 
MfS^n K3/V©«ISESg3©#IBtt^9eO*l-ij7'n h = 

[0188] mmm±f&i®2 s etcjs^x, agcr *• 

U lgfEtW#^«Ftl5 2 8 7(dfEfi!:i-6 1X7^18 
1) o &fELJ:5 hwgfcBiJ^Pn idfcj&Lfc. 

c&s *t»-cj^fBa52 8 1 £vmm&2^&mi-z> 

{^J-yfl 8 2). 

[0 18 9] BEW#2f±» tj||E»3*»fcafeffll$Jxfc 
(C, n) £§<igB2 9 2 "CjSft LT> «$§^2 9 
9tC|Sfit-rs Uf^l 9 1) . HftSRSBl 2 

2 ttgfa Lfc n tzM&t&nr y V **f->r y h&ftU 1 



2 l^feggLT, */ry F*»oT^5i>ir5i»*fl^ 
f -5 O^y^l 9 2) „ h&mifc^ 

9 9{C|E^-r?, 9 7) 0 h 

&l*o»#H:ti\ f^r^t, SEP^|g2W#)lKP r o v 

93). 

|0190]^Ty7*19 3dS|ltf $ttfct>» ^ 
1 9 4SrHfT-r?)o SBl OCDttmT'v h3;W;fo'ft5x 
9 4©P*flfc#Jif40 2 7©^l?fc5. fSSE 

SEttrS«#gB 2 9 8fcSE«+5 (^x-y^"2 71),t 

5-^2 7 2) . 

[0191] ;[£!£« 3 14, z SrgfsgB 2 8 2 T*g« L 
flMgftft&2 8 9izmm-% 83). 

iX^f£<X* Ri: LTOSrElofcr t^rSft-f-Sco 
•C. r«#JJ 5rS»1-5til^?rm^a5 2 8 1 2fa<bt)At> 
LT, MIS^d hay^^in. A*§B2 8 13 4?) 
A;fc$*xTA;*j{f$BflM$gB2 8 1 lfc^«>|E«£*vC<^ 

[0 19 2] 
[*3 2] 

iO : = (z I I mod v 



£i£ffg|$2 8 1 £*)U.m&2^mm-r?> (7fy/18 
5) . 

[0 1 9 3] tm»2ti y p SrSffpB 2 9 2 ~QS.it L- 
T, tftttttftft 2 9 9fcfB»i-5 (**r 2 7 3) „ 
ft 2 O^gB 2 9 47 

[0 19 41 

[«3 3] 

p : = p l mod v 

74) o mznmwfemknm 9 8tctE^$m:i>5 

x irff-g Lfc: p <o±.tiL<Dffi t ffi. —£crzi>Wj£-r& 

&Lfc^»frfctt. / LTM : = 1 | | i n 

Sraa^UT. fl»«««r«52 9 9»^JBflki-'5 Ur^2 

7 12) . Xt^2 7 5©!pJ^©fe*«5— SrT5*& 
Xf7^2 7 6t^f7^2 7 70ft^!3IC > /> 
©TftWKid^MSrSOaUt:, AAf««i»»2 9 1 

HClEfikLT, MlcOSriajeUT, If &&&& 2 9 9 \Z 
Eft1"5. X7y?2 7 8<Oftt><0 t LT, rtttttflBfi!: 
«r«l 2 4©|gl©rt«ttflSift«f»fcia«$*tTV^ j 

fc54§£-K»i, ^T-7^2 7 1 lOttfc!)!:, j :=j 
-n t L-X j rottSr^HLT. M : =M | | M £ LTM 
©<tSr«3Ei-5. j *S|* J:9'h*^*&fctt, j wftSr 
OiC^HL-T, M : =M \ \ j t LTMcDfitSr^Hi" 
5o V v f*t©»ft-e't>, HlOiHSgl5 2 9 3tR : = 
(C | |M)D mod n^fiSLT, fltttftftft 2 

9 9{cfe^-T5 Uf^2 7io) . 

[0195] ^fyT'H 4^Htr*ixfcfe, ^Ty7" 
1 9 3T?tyh £*bfc t, Provers. L Sr^^i" 



^^¥11-031204 

•5 Uf?yi 9 5) o 7.7-y-7l 9 5 t> L < fi*^ j/ 
7-1 9 7tf%fT£Jxft:g>. 36«tt2 9 l*»b*IE«3 — 

[0 19 6] ^H|g3Ji, l£|FJ3g 2 SUfcW 
2K^RSrS«»2 8 2tS«UT, tit$Btfc«f SB 2 8 9 
i-IBft-T^ Uf^l86)„ R E mod n £rft 
1©«3HBJ2 8 3T?fWi-5 (^f-77'18 7) 8 r© 
SW*S*©±ttOW*s» BSEtt4RtiH$8B2 8 7tCfE»£ 
H-CV^aci— Srf"5i»*, jEStMSIiE*fl$2 8 5 T'*J!£ 
(^7^18 8) „ ^fy7"18 8t-ilfci 
-a-tt, ^f7^18 1X*4^Lfcatri, 7T'y^l 
8 6 T"lf $g{£ttg|5 2 8 9 ICffi^LfcR £ SrMt- LT, ?IJ 

mmMmn&ftU2 8 1 4fciMki-<5. $ r©t 

itLtSUtilLT: Ur^7"18 9) s ffi7JgB2 8 1 
2 7)^tHtl-r^o ^fy/18 8t-tL4^ofct& 

k*> rte^jj ?rE*i-?.m^^ai^a5 2 8 1 2frhmt> 
~rz>o 

[0 19 7] EUiriSftl OOMMzfu K^A-T-fcS. ft 
d^WiS, f 7©yDh3/Ht f^ryh — 
«M8:rt-C»cAi:JjR*B:Sij0^^ry F©i#!JSSftLr, 

[0 19 8] 

[311 1] 
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Prover 

SIMk -=l 

iff 
X := rand 
send x 
receive p 
if pf modi/ = 
M :=0 

if M <i 
j 

M:=M||fi 
else 

M := 
i:=0 

else 

M := 
J2:= (CHAf^modn 

[0 19 9] [2. 13, SllCWnha^] 
»©tS9i#JlBS:fT**.S. BE9MB2 Kl±ttfk0!>K91#JR 

[0 2 0 0] [2. 1 4. |gl 2©*J-fg^n h^/v] 
03 1) Z.<0&m\Z.&tfZ>%l 2©Mf§7 p D hnyu-? 
[0 2 0 1] SEUH^ 2 Ki«JJ»#a*s*> 9 . L fcSEW¥)H 

[0 2 0 2] tEH^JIIO-^&Jtofctt* #JK«:tEJ£-*-<5fE 

[0 2 0 3] JR 1 2 n S a/U©iEW«2 ©#HS 

IIE§g 3 ©^©UtT©* - ** f . #W& 3 OtMEK&Ktt 
2tMttf* (v, E ) , EW*JB©A*»P7*s**ivC 

IExET-t5i-r5o 09*. tf, L# (f, v, £ , P 0 , 
Pi, P2. P3. P4. P5> ©J:5fc:*l*fc3*LT^Sfc 

[0 2 0 4] 9EfS«2 9 2-C«HE«3*»b (C. n) £ 
S« UT 0*^ y7° 1 9 1 ) . tfffi&^SB 2 9 9 KjEHk 
fry hUmm 2 2ttSmLfcntcmi--5^ 



9 7), *f/S-r5^-ys/ hS:8ro»£-fcH\ f^ry h 
t, HEW«2 0#JHP r o v e r S » ^*TV MWPtf# 
Lfc-fey O^y^l 93) „ Si 2©*tlg:7 , n 

p r o v e rs®t y MifeVT, Lfrh 
(f, v, £ , P 0 , Pi, P2. P3, P4, P5) 

[0 2 0 5] ^y^l 9 3^Hff 775// 
1 9 4$:3ltf-r5o 3? 1 ©*J-§g:/n K 3/HC*Jtt S^r" 
y/194 ©P*flfc3MiS:l2l3 1 K^fo f ^JCffe*. 
a^USi"* Uf^3 10 1) 0 f jJSiELItnfJ, * 
f'^3 10 2^h^7-yy'3 1 0 9*-e3rHfH-5 0 

[0 2 0 6] 8SEflMR£jAffi2 9 6 T*Sl$Cx b 
T, 3? 2 ©fgtlflif 2 9 8(C|E&-t-5 Ufy7' 
3 10 2), i£fl|«B2 9 1 £9&!iEg|32-x§ri£ff-r5 

(^ry/3 10 3) . «BE«B52*»fea6fS*tbfcp SrS 
mSB 2 9 2 T*g{f Lt, ffittft&A 2 9 9 fcaEjWS 

(XT'^3 104) , 

[0 2 0 7] 

[$C3 4] 

O e mod v 

^3 1 0 5) „ 1 0 5<©^m^^b^#-g-{C 

(4, xf7/3 1 0 6 t^fy/S 1 0 75rHfit5„ 
Mfc0SrRSU-C**aBft«2 9 9tE«-T* (*xy 
^3106) . P 0 ©ift^t> K ttffe-frft&sfeff*-* 

107), 7f7/3 1 0 5©^**S^L 
<^^#-^{Cf±. 7T7/3 108iXry^3 109 
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*mr*z>. m\c i zmfei-xmnszmn 299 {ztm 

SrHfT-fS (^7^5/ ^"3 1 0 9) „ 
[0 2 0 8] P 2 cc^t> b< f±^l¥5rHtTi-5 
fy^3 110) o P 3 <DiSH^ LOiiSH^SrllfTL 

^fy^3 1 1 1 <Dfe%:frM<DWr&te, 1 1 

2 Jr^fy/3 1 1 SSrHfrfSo P 1 1- < f* 

^S¥5rjlff-t-?) C^yT^ 112). R : = (C | 
I M) D mod n Srlg 1 W^^gC 2 9 3 T*ffg L 
t, t*««^2 9 9KfefiH-5 Ury/3 1 1 
3) , 777^3 1 1 1 0^^*T*^^^a-iCli, * 
f^ysi 14txf ^/3 1 15?:r(ft5„ P5W 



<w*t> i,<tetii^m*mft-fz> (^f^3i 14) 0 

5/7^3 1 1 5) „ ntt^Il^ffiT'B h=>MZ& 

[0 2 0 9] ^Ty/l 9 4^HfT^^cb. ^f?^ 
19 3 T'-fe s/ h $ttfc t, Provers^ L 
5 (^7^^19 5) „ T^y-y-fl 9 5 t> L< (i^x y 
7"1 9 7#l£fT$*u/c^ isim^2 9 l^e>^SE^l3 — 
RSriSm-TS U^i/7-1 9 6) 0 

[0 2 10] HX±&mi 2(Dftm^a H=/WC:fctt5fE 
0J^2<75#HT*fo?> <> 

[0 2 1 1 ] 

[gl 2] 
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4fMW«: (n,E) 

: p 

mt): M ±*HME invalid 



ttBet 

C := rand 
send (C,n) 
receive x 

p:= (xll/»)'«nod»' 
send p 

receive R 
i£R B modn = C\\M 

output M 
else 

output invalid 

wnm 

receive (<7,») 
find (»,«,£) 

/IM|e||ft||ft||P 3 ||ft|Ift||ft :=i 
if/ 

X := rand 
send x 
receive p 
if p* modi/ = xll/t 

M := 0 

Po 
else 

M .= 1 

ft 

ft 
If ft 

ft 

A:=(C||Af)°modn 
ft 

A := undefind 
send A 

[0 2 12] [2. 15. ^13©jftK^ah3;V] 
(ttBESSWfll^ 1213 0) Z.<D$£W\zto\fZMl 3(D 

J:5W-^ktt«f5£*-C©^s' MEiB4S2ilHI*K**. 
5. 

[0 2 13] S3 OfircD&BET/o ha/HMrfcStftE 
S3W*j6rg;I2iT-fe?)„ 

[0214] &bes 3 te&m*&m-tzw&tftn s\zx 



[0215] [ 3 . SS 2 ©3llfc0!l] 

[3. 1. fgSE^fe] ^Hlfe^J-efi, ^->rvV<DWmt 

[0 2 16] p(±*icT*fcl9, GttiUfc^icP^a^Bli 

= g"AW;$Mi# > ( P , G, g , y, x) 

try h<D®mmmx-hz 0 m\z. ( P , g, g , y ) & 

3o 
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[0217] Gfrmrnvrnfemt ltm 

So 

[0 2 1 8] 09*.ff« (p, G> g) SrV^xA*iit 
U 4*WH»#y» e«#xii-5 0 ^y Mi^y 
h#mtf#x tfE^B*««dut^s/ M*JPflMS 
LJ:9H-©Sn5-r'-^T*fet), fE9)4£2#* (C, y, 
t, L) t*H.TffiM«@Wfl»«duSrfflV^-Cr (C, 
y, t, L) =C^fH|Ct?#5J:5fc«^i-5 0 

[0 2 19] fSRtf, duSr*SffiF**oa#«i: U 
EuSrdufc*r^i-5«t-^bi:U H^-^fitMSci L 
t : = (Eu (x) „ H (d 0 | | x | ID) 

[0 2 2 0] hSr±Jfi©«Ki^|li-5i:» ^y 

hSrfflV^*:8«6o<IMR«#xfcJ:5|f-§vfbcxtt, A* 
(C, y, t, L) izlzt LXm.W& 2 common d\)iZ 
ioTEu (D) &t*§-LT«HliS2 4 , -CD*:|Hl«U 

[02 2 1 ] tfc, du*— ^ftttHSi: LT. t=x 

-du (l, y) t t>-c*5 c 

[0 2 2 2] ^Jry ho±3fi©^ll»=J:irff, Atj 
(C, y, t, L) fc3*LTD»wJ:5«F-^fl:ttCtC 

dU (L, y) £«UH-S - t =fc o TfT* 5 ^ t h 5» 
[0 2 2 3] S-m«**|*HHwBJi3fc£^©tt 

[0 2 2 4] [3. 2. %il 4<Dttmzfti h="^l 
(mm&2 &Vir$rt:ft-o&m&m<07-fry K mi 3, 
Ell 9, 1212 0) I14©*fM/o h^/K*lt mEWS 

n N=/Hc*i»t5^SEI§3©#)HSr|g|l 3M, SEIH3I2 

[0 2 2 5] ^!E^3(±, MGEflM&jftft 2 8 6}^J;o 
Ta&r ££/&LT, C : = g r i LTft U-Vv?C£: 
4^tt> BSE<tt*ftftffi 2 8 7 KIMM" 3 (xf^ 

131) . 7t^i 3 2<Dftt>9\z. x mmnftttfii 

2 8 7!CsE^£*WtCi, ^Mt**y 5r*irfeT, i£fg 
»281i? EElfm 2 

[0 2 2 6] y7"l 9 l<D{t£><9\Z. SEW«2tt, 
«lliE»3*»e>a6fS$*Ufc (C, y) SrgffgB 2 9 2 T'S 
mtT, flMRfi&ttA2 9 9(ciE£i1-S„ ^y hffi^gB 

1 2 2ttg«Lfcyfc»f£i-5?-*-s/ hSr^-Jry hfS^p 
g&l 2 lA^^LT, f^ry h^otV^^Jf 5 

fcfirfcfcv^ t *«*i-5fS (^©*&f±0) SrK^U 
T, flmfM$8B2 9 9fclE*1-5 9 7), 



ffo4§-&{C(i x f^r^t, BEW*2©#JBP rove 
r S > f-*rv h{WPtt«L&M»tt2 9 1 2rtKl-fcy H 

(^y^l 9 3) o 
[0 2 2 7] ^T-y^l 9 3^Hfr$tufc?>. 

1 9 4 SrHtT-TSo rco^mowtctetts^^yn 9 

4©flM«fc#««:ia2 OCftctlP^tS. ftgBttflgifc 
f#£Bl 2 4©IB2©rtSBJtt«l«»S|5*»e)tt*mLyi:-t© 
«p©^Sflt imei, HiSBSfiStl-CV^^raJWRiSr 

(^T77'2 0 1) o H&WSirCfcSirWfcLfc 
^{-fl, 111 C0^gB2 9 3iC*3l/>TR*. R : =C 

f?/2 0 2) „ #iCR(D-(73fm$r, SE9^2cDtp<7) 
^ 1 ©SUSlSB 2 9 3-C?i-^Tth^L,Tt>«tV^S. ^ 
N t*U = x-du (L, y) ©J:5K:#j*$*fCV^5 
tt, c *cof T gte c t c<«J (L, y) © j; b tc t>f T ® T- 
#5<D-C% Ct$:liE0JI§2O^T*H-^bT, SE9§#2© 
f OS5 1 OjKgfff 2 9 3 -C-fH? LfcCdua. y) £ 
«2©^SM:te:b*-Cfef|-|*-e#5. fiE9i«2©W-3IE 

77/2 0 1 icfc^T^y ^Sg^-efeSi^JJtLfc 

12 1^bB'J^LT (Xxy7°2 0 3) , Rtllr^ 
LT, flf««»SB 2 9 9 Ur^20 
4) „ r Z.tiX*&Z.<DMm<OM\Z.isVZ ) X7-y-7l 9 4 

[0 2 2 8] 9 4#!!tT£*xfcb, ^ry^ 

19 3 T'ir y h t, Prover S > L Sr^lffllgB 

2 9 1 2*»P>«?^i-5 (^^s/^1 9 5) . ^fy/1 
9 5{)L<li^r?^l 9 7dS||fT$tufcb % R£i£{H 
SB 2 9 1 «fc V) ^mEgg 3 — i£ffi-T-5 Ufy/l 9 6) a 

[0 2 2 9] ^IES3 tt, SmSB2 8 2 K*5^TfEM3g 
2*»&aiflI$^fcRSrSff UT, 2 8 9 KlIE 

fflt-rs Ury713 3)„ y r Srmi©^gl52 8 3 

^SEgB2 8 5X-mi£-fZ> (^fj'7'13 4) 0 -iSc-T5 

2 8 1 2 J: 9 m^i-5o -SLJ5cv^JpJSSixfc»fi'tt 
fa<?±<DX\ r4§#jj #*-t-5m^?rm^lSB2 8 1 2 «t 
[0 2 3 0] fiAiasjRl 4©MK7°d h^/WT'fc?,,, ^ 

[0 2 3 1] 
[S13] 
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USX: '*n»' fclXtt'&ab' 
r :— rand 

send (C,p) 
receive R 
ity r = R 

output ' *3tt' 
else 
output ' 



Prower 
if time < L 
R**C 

R-l 

[0 2 3 2] [3. 3. Jgl 5©*tgg:/n f*3/V] 
(^l/^Ta«|s]ic#M(0^^s' K Hll 9, 03 2, 
HI 3 3) |gl Sc^M^n h3^T'*IJffli-^^^-y 

MM^n hn/K-jb'(t5^|ES3 0#)l|ISr|ll3 2(c, SE 

[0 2 3 3] ^SE|#3tt, fgsEtf$&fei£Sl5 2 8 6KJ;o 
TSLtScr Sr^LT, C : = S r t Ltf-y U^v'C £ 
dfcj&LT, ^EElf|g^g|52 8 7ic|E»-t-5 (^^-y^" 

321). mmnm&m® 2 8 7 ^is^ infect, ^ 

Mtf^y^^ttoT, iS«m5 2 8 1 <fct>fE^:g§2~i£« 
i-5 (^f^3 2 2) o 
[0 2 3 4] XT-yzfl 9 lCD^ip?)^, fjEP^2(4, 

&m&3frbmm£}itc (c, y ) =srsma52 9 2-r-g 
mur, tw#^gB2 9 9{rK»i-5 0 bmmts 

1 2 2fA5ff Lfcy K*flS-r5^f 
gBl 2 lii^iLT, H £}§oT^5^ 5 d>£ 

m?E-tz> (^t^i 92) » ^m-r^^ry h*ntc 

U 2 9 9 KEfirf** U^s^l 9 7) 0 nfe-t^'r 
y h^«fO^-{ctt x ^-^s/ h t, iE^2co^«MP r 

0 v e r S> ^>Ty httAPtW $8 L £-tr y K^S U^S/ 
^193), Prover S ©t'^iU, Lit) 

U, i) S:5t«JffiUX*5<o 

[0 2 3 5] 7f^l 9 3*S3ltT$ixfcfc. **ry-f 

1 9 4«r|KfTi~S. h a/ufcJattS^x yT" 1 9 
4<Dp$|B/ < e#)ilM^[ll3 3lC^oTIftBJ-r?.„ IgfEtff#£ 
J&SB2 9 6*-*W*jT*nMa fc&jAL-T* x:=g s 



2 9 8 fc8E»i-S s/-7°3 3 1 ) . &m&S 2 9 1 *» 

^^SESC 2^x^^11-5 (^7^3 3 2) 0 
[0 2 3 6] 3 ft, x &§{f 2 8 2 T'^ff L 

t, tf #{fc£fg& 2 8 9 \zmmti> (^7^3 2 3) 0 

2 8 1 2 £ t) UJ* LT, Mfg^n h = A^UTi-* 
(^75-^3 2 4) . 3? 2 ©igggB 2 8 4 JeJo^T 
p 

[0 2 3 7] 
[*3 5] 

/o : = X 1 

ib-CfHfi-3 (Xfy/3 25) 0 fULfc^ifl 

§B2 8 i j; ymwm2~-mm-fz> ^7^326). 

[0 2 3 8] tE93$2 f±, p SrSffgR 2 9 2 T'SfS L 
T, IMMmn 2 9 9 ICfEfitrTS U7-y7"3 3 3) .. 
£2<B2ft3N*2 9 4T'7,s=&fh^LT, SfSLfcpi- 
Sci-*d»*ll3&f 5 (^7^y3 3 4) „ WS©feIt L 
T-StSi^tli, rt»:R«ffiH$«l 2 4©£2©I*J 
SftT^S**!'* iy^fttSr-r^ 
^y^VNi-S Ury/3 3 5) o *"ryy°S 3 5 *s 
$ ixfc , i y ©ftt £ L J; t> # e>*tfc±BMItt i t it 
m-fZ (^77^3 36) o ^5/^3 3 7©iti|&©££ 
*tLt, i y ©«*s i StTOS^tt, * l 2 
9 3T'R : = C x £ft-g LT, 1f$8{fc«g|S2 9 9 £|Eft 
i"5 (*^s/7°3 3 7) o *-ry:/3 3 7 ©JtgEWig* 
t Lt« i yC0ii*5 i £ rt^^ftlf 
A l 2 4 ©|g 2 <8rtgMftBft&81Sd>e> i yZMtit. Its 

hfiMSSBl 2 1 y hSriU^LX (*xs/ 

^3 3 8) „ 7f77 , 3 3 4T-|tU^ofci^^ 
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Mz&VZXT y7l 9 4(D^^#f|MT*fe2)„ 
[02391 ^fy/l 9 4 ^Jlfr^arfc b> Xry/ 
1 9 3 T'ir y V t . P r o v e r S , L ^^^i" 

5 Ufy^l 95), 7fy7 , 195fcL<IJ^fy 

Ury/l 9 6) „ 
[0 240] ^U|g 3 fi, $(S«E 2 8 2 ^BEW* 
2*»e>afe«$*vfcRSrS«L-C» 2 8 9 fcflE 

•kf« (^f 5 '7 , 3 2 7) . y r £!gl<D»igg&2 8 3 
■eW-JSUT, *©H-3IEfe*!6SRi:-arr«*»S:, lEStt 

r := rand 
C :=£>" 
send (C, y) 
receive x 

receive R 
tty r =R 

output * ^T3S* 
else 

output ' 



&!iaS2 8 5T?*JS-f5 (^r-y^3 2 8) „ -grTS 
2 8 1 2 J: 5 HJ^-TSo — &U*lr^t*l3fe$iXfc»&»4 

mm 2 &mw£?->r y v ^ot^s r t ^^ft 
fr^tc<Dx\ m&\ Eft-rsa^srm^i^2 8 1 2 ± 

[0 2 4 1 ] £il±as» 1 5 wMIS^a h * 

[0 2 4 2] 
[*1 4] 



Prover 
a = rand 

X 9" 
send x 
receive p 

ifv'=P 

i := i + 1 

else 

R=l 

[0243] 14. m 3 <onwm 
(f^-^hrow^L ins -mi 2) ^.(Dm3(D^mm 

[0 2 4 4] bWlfc • IStT^B 1 Kl*SV*-Ctt, ^ 

#af±JEM»S**«««f#S (^- * 

xvmmx'hz,. 

[0 2 4 5] ^^M-Ift8»lia5f 

>ryY<fef8L' «fT©^©ttf1Mco^T»±!&4©3ftfc0!l 



[0 2 4 6] f^ry HSfrOfURSria 5 Sr^fig LTIftW 

«D)VHk^79Ke»d-tl i = 0 Sri£5. 
SrfSo&SttfcS. L^c^o-C, -fc 

mw&mn*tf>>'?mt<nry hm^tw 

[0 2 4 7] E16I4, ^tT^ttfc^^-y hCSEPJ^2^ 
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